mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-23 21:59:11 +00:00
Code Issues 32 Releases Wiki Activity

Fixed #24915 -- Added stricter session key validation

Browse Source 
Changed _session_key attribute to a property and implemented basic
validation in the setter. The session key must be 'truthy' and
at least 8 characters long. Otherwise, the value is set to None.
This commit is contained in:
David Bannon
2015-06-05 13:48:41 +01:00
committed by Tim Graham
parent 20ff296cb1
commit f4416b1a8b
3 changed files with 35 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/releases/1.9.txt
View File

@@ -604,6 +604,8 @@ Miscellaneous
<django.core.urlresolvers.ResolverMatch.namespace>`, the empty value is now
an empty string instead of ``None``.
* For security hardening, session keys must be at least 8 characters.
.. _deprecated-features-1.9:
Features deprecated in 1.9