Carl Meyer 66d12d1aba [1.8.x] Fixed #19324 -- Avoided creating a session record when loading the session. ...

The session record is now only created if/when the session is modified. This
prevents a potential DoS via creation of many empty session records.

This is a security fix; disclosure to follow shortly.

2015-07-08 15:23:18 -04:00

..

__init__.py

[1.8.x] Moved contrib.sessions tests out of contrib.

2015-02-11 11:54:51 -05:00

tests.py

[1.8.x] Fixed #19324 -- Avoided creating a session record when loading the session.

2015-07-08 15:23:18 -04:00