#16987: Improve failure message for test_invalid_session_key
----------------------------------+-----------------------------
     Reporter:  justin@…          |      Owner:  jMyles
         Type:  Bug               |     Status:  new
    Component:  contrib.sessions  |    Version:  1.3
     Severity:  Normal            |   Keywords:  tests, sessions
 Triage Stage:  Unreviewed        |  Has patch:  1
Easy pickings:  0                 |      UI/UX:  0
----------------------------------+-----------------------------
 contrib.sessions.tests.SessionTestsMixin.test_invalid_key raises
 AttributeError if middleware has written an item to the cache which uses
 an integer for the key.

 Ticket author found that djangobb (a packaged django forum app which
 ticket author has no affiliation) uses this technique.

 Conventional session cache keys, for security as well as readability, need
 to use namespaces.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/16987>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to