What exactly is &quot;logout fixation&quot;? Session&#x2F;login fixation makes sense, but I can&#x27;t really imagine what logout fixation would look like. Google was of no help, either. Do you mean a logout function which doesn&#x27;t properly log you out, or logout CSRF?