diff options
| author | Carl Meyer <carl@oddbird.net> | 2015-06-10 15:45:20 -0600 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2015-07-08 07:35:39 -0400 |
| commit | 1828f4341ec53a8684112d24031b767eba557663 (patch) | |
| tree | ad2315e49ea8c762203667c2b3a901bc2f268e12 /scripts | |
| parent | 9eda28ac48bea8aab1cf622b0e493a66c6b85840 (diff) | |
[1.7.x] Fixed #19324 -- Avoided creating a session record when loading the session.
The session record is now only created if/when the session is modified. This
prevents a potential DoS via creation of many empty session records.
This is a security fix; disclosure to follow shortly.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions