Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/tests/sessions_tests
Commit message (Collapse)AuthorAgeFilesLines
* Fixed quad quoted ("""") docstring starts.John Vandenberg2015-10-201-1/+1
|
* Fixed #22938 -- Allowed clearsessions to remove ↵Aleksandra Tarkowska2015-10-031-4/+14
| | | | file-based sessions.
* Fixed #22634 -- Made the database-backed session ↵Sergey Kolosov2015-08-272-9/+82
| | | | | | | | backends more extensible. Introduced an AbstractBaseSession model and hooks providing the option of overriding the model class used by the session store and the session store class used by the model.
* Added a test to ensure empty sessions are saved.Tim Graham2015-08-201-0/+39
|
* Fixed DoS possiblity in contrib.auth.views.logout()Tim Graham2015-08-181-0/+17
| | | | | | Thanks Florian Apolloner and Carl Meyer for review. This is a security fix.
* Fixed #19324 -- Avoided creating a session record when ↵Carl Meyer2015-07-081-0/+20
| | | | | | | | | loading the session. The session record is now only created if/when the session is modified. This prevents a potential DoS via creation of many empty session records. This is a security fix; disclosure to follow shortly.
* Fixed #24915 -- Added stricter session key validationDavid Bannon2015-06-071-0/+15
| | | | | | Changed _session_key attribute to a property and implemented basic validation in the setter. The session key must be 'truthy' and at least 8 characters long. Otherwise, the value is set to None.
* Fixed incorrect session.flush() in cached_db session ↵Tim Graham2015-05-201-0/+1
| | | | | | | | backend. This is a security fix; disclosure to follow shortly. Thanks Sam Cooke for the report and draft patch.
* Fixed #24799 -- Fixed session cookie deletion when using ↵Bo Lopker2015-05-151-0/+29
| | | | SESSION_COOKIE_DOMAIN
* Fixed sessions test on Python 3.5; refs #23763.Tim Graham2015-03-311-2/+6
| | | | | SimpleCookie.__repr__() changed in https://hg.python.org/cpython/rev/88e1151e8e02
* Fixed #24468 -- Made signed cookies cache backend ↵Tim Graham2015-03-121-0/+12
| | | | resilient to unpickling exceptions.
* Moved contrib.sessions tests out of contrib.Tim Graham2015-02-112-0/+634