Jens
Not a member
Jens's latest activity
Monday, March 23 2009
2200
reset_session broken
was updated
in Ruby on Rails
-
Jens commented at 10:35 AMClearing the session doesn't protect against session fixation attacks since the session id stays the same, so just calling session.clear() is definitely not a s...