diff options
| author | Carl Meyer <carl@oddbird.net> | 2015-06-10 15:45:20 -0600 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2015-07-08 07:38:06 -0400 |
| commit | 2e47f3e401c29bc2ba5ab794d483cb0820855fb9 (patch) | |
| tree | 69269e5672184425c13bb44ea4a6a6c5789ace81 /django/__init__.py | |
| parent | c570a5ec3ef673eaad18dccb70bcda9f762e4354 (diff) | |
[1.4.x] Fixed #19324 -- Avoided creating a session record when loading the session.
The session record is now only created if/when the session is modified. This
prevents a potential DoS via creation of many empty session records.
This is a security fix; disclosure to follow shortly.
Diffstat (limited to 'django/__init__.py')
0 files changed, 0 insertions, 0 deletions