Please sign in to comment.
[1.7.x] Fixed #19324 -- Avoided creating a session record when loadin…
…g the session. The session record is now only created if/when the session is modified. This prevents a potential DoS via creation of many empty session records. This is a security fix; disclosure to follow shortly.
- Loading branch information...
Showing with 74 additions and 8 deletions.