#16987: Improve failure message for test_invalid_session_key ----------------------------------+----------------------------- Reporter: justin@… | Owner: jMyles Type: Bug | Status: new Component: contrib.sessions | Version: 1.3 Severity: Normal | Keywords: tests, sessions Triage Stage: Unreviewed | Has patch: 1 Easy pickings: 0 | UI/UX: 0 ----------------------------------+----------------------------- contrib.sessions.tests.SessionTestsMixin.test_invalid_key raises AttributeError if middleware has written an item to the cache which uses an integer for the key.
Ticket author found that djangobb (a packaged django forum app which ticket author has no affiliation) uses this technique. Conventional session cache keys, for security as well as readability, need to use namespaces. -- Ticket URL: <https://code.djangoproject.com/ticket/16987> Django <https://code.djangoproject.com/> The Web framework for perfectionists with deadlines. -- You received this message because you are subscribed to the Google Groups "Django updates" group. To post to this group, send email to django-updates@googlegroups.com. To unsubscribe from this group, send email to django-updates+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-updates?hl=en.