phan
Not a member
phan's latest activity
Monday, March 29 2010
4091
ActiveRecord::SessionStore allows blank session_id
was updated
in Ruby on Rails
-
phan commented at 1:14 AMIf the user unintentionally pass in a empty session ID, I would think, we'd have to generate one for them. Otherwise if two users * unintentionally* passing emp...
Tuesday, March 02 2010
4091
ActiveRecord::SessionStore allows blank session_id
was created
in Ruby on Rails
-
phan created the ticket at 12:39 PMActiveRecord::SessionStore::Session does not check for empty session_id value. So when cookie_only = false and passing in empty session_key value, a session wit...