Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make session_hijacking an optional protection #1984

Merged
merged 1 commit into from Jan 5, 2024

Conversation

dentarg
Copy link
Member

@dentarg dentarg commented Jan 5, 2024

Also remove the very old[1] does not include ... comment.

Fighting the test I had to change made me realize just how much the order of middlewares matters. Not very intuitive 馃槥. Maybe someday someone will get to #1659

Close #1930

1: 0985552

Also remove the very old[1] `does not include ...` comment.

Fighting the test I had to change made me realize just how much the
order of middlewares matters. Not very intuitive 馃槥.
Maybe someday someone will get to sinatra#1659

Close sinatra#1930

1: sinatra@0985552
@dentarg dentarg merged commit 157e307 into sinatra:main Jan 5, 2024
24 checks passed
@dentarg dentarg deleted the session_hijacking/optional branch January 5, 2024 13:18
@dentarg dentarg mentioned this pull request Jan 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Disable session_hijacking by default
1 participant