| Age | Commit message (Expand) | Author |
| 2017-09-07 | Reverted "Fixed #27818 -- Replaced try/except/pass with contextlib.suppress()." | Tim Graham |
| 2017-06-28 | Fixed #27818 -- Replaced try/except/pass with contextlib.suppress(). | Mads Jensen |
| 2017-04-27 | Refs #27795 -- Replaced many force_text() with str() | Claude Paroz |
| 2017-04-17 | Fixed #28066 -- Prevented SessionBase.cycle_key() from discarding data. | InvalidInterrupt |
| 2017-02-04 | Refs #27656 -- Updated django.contrib docstring verb style according to PEP 257. | Anton Samarchyan |
| 2017-01-19 | Refs #23919 -- Removed SessionBase.iterkeys(), itervalues(), iteritems(). | Srinivas Reddy Thatiparthy |
| 2017-01-19 | Refs #23919 -- Stopped inheriting from object to define new style classes. | Simon Charette |
| 2017-01-18 | Refs #23919 -- Removed encoding preambles and future imports | Claude Paroz |
| 2016-08-08 | Fixed #26764 -- Fixed Session.cycle_key() crash on unaccessed session. | Adam Zapletal |
| 2016-04-20 | Fixed #26520 -- Fixed a regression where SessionBase.pop() didn't return a Ke... | Tobias Kroenke |
| 2016-04-08 | Fixed E128 flake8 warnings in django/. | Tim Graham |
| 2016-02-26 | Fixed #21608 -- Prevented logged out sessions being resurrected by concurrent... | Tore Lundqvist |
| 2015-12-31 | Removed British/Austrialian word: whilist. | Tim Graham |
| 2015-06-06 | Fixed #24915 -- Added stricter session key validation | David Bannon |
| 2015-04-13 | Fixed #24621 -- Fixed and documented SessionBase.pop's second argument | Adam Zapletal |
| 2015-02-06 | Sorted imports with isort; refs #23860. | Tim Graham |
| 2014-05-11 | Fixed #20936 -- When logging out/ending a session, don't create a new, empty ... | Matt Robenolt |
| 2014-02-08 | Fixed #21674 -- Deprecated the import_by_path() function in favor of import_s... | Berker Peksag |
| 2013-11-02 | More attacking E302 violators | Alex Gaynor |
| 2013-09-10 | Fixed #20841 -- Added messages to NotImplementedErrors | Gregor MacGregor |
| 2013-08-22 | Fixed #20922 -- Allowed customizing the serializer used by contrib.sessions | Tim Graham |
| 2013-05-25 | Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation. | Preston Holmes |
| 2012-11-29 | Fixed #19356 -- Increased session key entropy. | Aymeric Augustin |
| 2012-10-28 | Fixed #18194 -- Expiration of file-based sessions | Aymeric Augustin |
| 2012-10-27 | Added optional kwargs to get_expiry_age/date. | Aymeric Augustin |
| 2012-10-27 | Fixed #19200 -- Session expiry with cached_db | Aymeric Augustin |
| 2012-08-29 | Replaced many smart_bytes by force_bytes | Claude Paroz |
| 2012-08-15 | [py3] Fixed test_client_regress tests | Claude Paroz |
| 2012-08-14 | [py3] Avoided the deprecated base64 interface. | Aymeric Augustin |
| 2012-08-12 | [py3] Fix encoding issues in contrib.sessions | Claude Paroz |
| 2012-07-22 | [py3] Switched to Python 3-compatible imports. | Aymeric Augustin |
| 2012-02-23 | Cleanup to use get_random_string consistently. | Paul McMillan |
| 2011-11-27 | Fixed #11555 -- Made SessionBase.session_key read-only. Cleaned up code sligh... | Aymeric Augustin |
| 2011-11-20 | Upgraded django.contrib.sessions to be compatible with time zone support. | Aymeric Augustin |
| 2011-09-09 | Replaced `has_key()` calls with `in` to ease Python 3 port. Thanks, Martin vo... | Jannis Leidel |
| 2011-07-13 | Fixed #16225 -- Removed unused imports. Many thanks to Aymeric Augustin for t... | Jannis Leidel |
| 2011-03-30 | Removed Django 1.2 compatibility fallback for session data integrity check hash. | Luke Plant |
| 2011-03-28 | Removed a bunch of Python 2.4 workarounds now that we don't support it. Refs ... | Adrian Holovaty |
| 2010-10-14 | Fixed #14445 - Use HMAC and constant-time comparison functions where needed. | Luke Plant |
| 2008-08-21 | When logging in, change the session key whilst preserving any existing | Malcolm Tredinnick |
| 2008-08-15 | Made a few small tweaks to reduce persistent storage accesses in the session | Malcolm Tredinnick |
| 2008-08-14 | Fixed #8314 -- Fixed an infinite loop caused when submitting a session key (via | Malcolm Tredinnick |
| 2008-08-14 | Fixed #8310 -- Actually use the SystemRandom RNG, if available, which fixes an | Malcolm Tredinnick |
| 2008-08-14 | Implemented a flush() method on sessions that cleans out the session and | Malcolm Tredinnick |
| 2008-08-14 | Added a clear() method to sessions. Patch from mrts. Refs #7515. | Malcolm Tredinnick |
| 2008-08-14 | Added guaranteed atomic creation of new session objects. Slightly backwards | Malcolm Tredinnick |
| 2008-08-02 | Fixed #7919 -- md5 and sha modules are deprecated since Python 2.5, use hashl... | Gary Wilson Jr |
| 2008-06-23 | Several Django styling fixes in the `contrib.sessions` app. | Gary Wilson Jr |
| 2008-06-18 | Fixed #7429 -- Modified the Session base class a little more dictionary-like ... | Russell Keith-Magee |
| 2008-06-07 | Fixed #2548: added get/set_expiry methods to session objects. Thanks, Amit Up... | Jacob Kaplan-Moss |