For instance, even after a user has been validated and assigned a session ID, you should revalidate that user when he or she performs any highly sensitive actions, such as resetting passwords.
英
美
- 例如，即使在一個(gè)用戶(hù)經(jīng)過(guò)身份驗證并分配了一個(gè)會(huì )話(huà)ID之后，在它執行一個(gè)高度敏感的動(dòng)作例如修改密碼時(shí)，仍然要重新驗證身份。
