1
0
mirror of https://github.com/django/django.git synced 2025-01-19 14:52:54 +00:00
django/tests/sessions_tests
Carl Meyer df049ed77a Fixed #19324 -- Avoided creating a session record when loading the session.
The session record is now only created if/when the session is modified. This
prevents a potential DoS via creation of many empty session records.

This is a security fix; disclosure to follow shortly.
2015-07-08 15:23:03 -04:00
..