chango.git/tests/signed_cookies_tests/tests.py, branch devmain

Refs CVE-2026-6873 -- Defaulted SIGNED_COOKIE_LEGACY_SALT_FALLBACK transitional setting to False.

2026-06-03T16:12:54Z

Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisions.

2026-06-03T11:37:26Z

Made signed cookies derive their signer namespace from an injective encoding of `(name, salt)` while preserving compatibility with legacy `name + salt` cookies behind SIGNED_COOKIE_LEGACY_SALT_FALLBACK. Thanks Peng Zhou for the report, and Shai Berger, Markus Holterman, Jake Howard, and Paul McMillan for reviews. Co-authored-by: Jacob Walls Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Fixed #33562 -- Made HttpResponse.set_cookie() support timedelta for the max_age argument.

2022-03-07T06:57:14Z

Refs #33562 -- Added tests HttpRequest.get_signed_cookie() with timedeltas.

2022-03-07T06:29:43Z

Refs #33476 -- Reformatted code with Black.

2022-02-07T19:37:05Z

Refs #23919 -- Removed encoding preambles and future imports

2017-01-18T08:55:19Z

Fixed #26747 -- Used more specific assertions in the Django test suite.

2016-06-16T18:19:18Z

Refs #26022 -- Used context manager version of assertRaises in tests.

2016-01-29T17:32:18Z

Refs #24652 -- Used SimpleTestCase where appropriate.

2015-05-20T17:46:13Z

Fixed #23792 -- Added test.utils.freeze_time() context manager.

2014-12-22T12:46:40Z