mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-08-04 02:48:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fixed incorrect session.flush() in cached_db session backend.

Browse source 
This is a security fix; disclosure to follow shortly.

Thanks Sam Cooke for the report and draft patch.
This commit is contained in:
Tim Graham 2015-05-11 09:58:43 -04:00
parent be67400b47
commit 088579638b
3 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tests/sessions_tests/tests.py
View file

@ -165,6 +165,7 @@ class SessionTestsMixin(object):
self.session.flush()
self.assertFalse(self.session.exists(prev_key))
self.assertNotEqual(self.session.session_key, prev_key)
self.assertIsNone(self.session.session_key)
self.assertTrue(self.session.modified)
self.assertTrue(self.session.accessed)