#13478: Session backends should all refuse user-defined, non-existant IDs
------------------------------------+------------------------------------
   Reporter:  jdunck                |                    Owner:  nobody
       Type:  Cleanup/optimization  |                   Status:  new
  Component:  contrib.sessions      |                  Version:  1.1
   Severity:  Normal                |               Resolution:
   Keywords:                        |             Triage Stage:  Accepted
  Has patch:  0                     |      Needs documentation:  0
Needs tests:  0                     |  Patch needs improvement:  0
------------------------------------+------------------------------------

Comment (by aaugustin):

 In [17155]:
 {{{
 #!CommitTicketReference repository="" revision="17155"
 Fixed #11555 -- Made SessionBase.session_key read-only. Cleaned up code
 slightly. Refs #13478.

 This also removes the implicit initialization of the session key on the
 first access in favor of explicit initialization.
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/13478#comment:4>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to