mirror of
https://github.com/django/django.git
synced 2025-01-19 14:52:54 +00:00
df049ed77a
The session record is now only created if/when the session is modified. This prevents a potential DoS via creation of many empty session records. This is a security fix; disclosure to follow shortly.