You should also avoid displaying truly sensitive data, such as credit card numbers, to a user who has only been validated by session ID.

• 你也应当避免直接向一个仅通过会话ID验证的用户显示高度敏感的数据，例如信用卡号。