Download Install Tutorial Docs FAQ Tools WikiLicense Team IRC Planet Involvement Shop Book

Changeset 1510

Show
Ignore:
Timestamp:
12/10/06 17:59:58
Author:
fumanchu
Message:

2.x fix for #408 (SessionFilter?? doesn't check result of generateSessionID() against sessionStorage).

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • branches/cherrypy-2.x/cherrypy/filters/sessionfilter.py

    r1505 r1510  
    141141        else: 
    142142            # No session_id yet 
    143             sess.session_id = sess.generate_session_id() 
     143            id = None 
     144            while id is None: 
     145                id = sess.generate_session_id() 
     146                # Assert that the generated id is not already stored. 
     147                if sess.session_storage.load(id) is not None: 
     148                    id = None 
     149            sess.session_id = id 
     150             
    144151            sess.session_data = {'_id': sess.session_id} 
    145152            sess.on_create_session(sess.session_data) 

Hosted by WebFaction

Log in as guest/cpguest to create tickets