Results of 1 - 10 of about 70 for SESSION (0.022 sec.)
- セッションの使いかた — Django 4.0.6 ドキュメント 12096
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... を行います。 MIDDLEWARE 設定を編集し 'django.contrib.sessions.middleware.SessionMiddleware' を含むようにする。 ... startproject で作られるデフォルトの settings.py は SessionMiddleware が有効化されています。 セッションを使いた ... くない場合は、 MIDDLEWARE 内の SessionMiddleware 行と INSTALLED_APPS 内の 'django.contrib ... .sessions' を削除しても構いません。これで、オーバーヘッドが ...
-
https://man.plustar.jp/django/topics/http/sessions.html
- [similar]
- Django 1.4.21 release notes — Django 4.0.6 ドキュメント 10855
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... n 1.4.20. Denial-of-service possibility by filling session store ¶ In previous versions of Django, the sessio ... n backends created a new empty record in the session storage anytime request.session was accessed and t ... here was a session key provided in the request cookies that didn't al ... ready have a session record. This could allow an attacker to easily cre ...
-
https://man.plustar.jp/django/releases/1.4.21.html
- [similar]
- Django 1.8.2 リリースノート — Django 4.0.6 ドキュメント 10827
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... a security issue and several bugs in 1.8.1. Fixed session flushing in the cached_db backend ¶ A change to se ... ssion.flush() in the cached_db session backend in Django 1.8 mistakenly sets the session ... than None . An empty string is treated as a valid session key and the session cookie is set accordingly. Any ... users with an empty string in their session cookie will use the same session store. session.fl ...
-
https://man.plustar.jp/django/releases/1.8.2.html
- [similar]
- Django 1.7.9 release notes — Django 4.0.6 ドキュメント 10784
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... in 1.7.8. Denial-of-service possibility by filling session store ¶ In previous versions of Django, the sessio ... n backends created a new empty record in the session storage anytime request.session was accessed and t ... here was a session key provided in the request cookies that didn't al ... ready have a session record. This could allow an attacker to easily cre ...
-
https://man.plustar.jp/django/releases/1.7.9.html
- [similar]
- Django 1.8.3 リリースノート — Django 4.0.6 ドキュメント 10390
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... le alias. Denial-of-service possibility by filling session store ¶ In previous versions of Django, the sessio ... n backends created a new empty record in the session storage anytime request.session was accessed and t ... here was a session key provided in the request cookies that didn't al ... ready have a session record. This could allow an attacker to easily cre ...
-
https://man.plustar.jp/django/releases/1.8.3.html
- [similar]
- Django 1.7.10 release notes — Django 4.0.6 ドキュメント 10150
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... of-service possibility in logout() view by filling session store ¶ Previously, a session could be created whe ... could allow an attacker to easily create many new session records by sending repeated requests, potentially ... filling up the session store or causing other users' session records to b ... e evicted. The SessionMiddleware has been modified to no longer create em ...
-
https://man.plustar.jp/django/releases/1.7.10.html
- [similar]
- Django 1.4.22 release notes — Django 4.0.6 ドキュメント 10037
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... of-service possibility in logout() view by filling session store ¶ Previously, a session could be created whe ... could allow an attacker to easily create many new session records by sending repeated requests, potentially ... filling up the session store or causing other users' session records to b ... e evicted. The SessionMiddleware has been modified to no longer create em ...
-
https://man.plustar.jp/django/releases/1.4.22.html
- [similar]
- 設定 — Django 4.0.6 ドキュメント 9685
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... ittently) fail. Change this setting to None to use session-based CSRF cookies, which keep the cookies in-memo ... token form input instead of from the cookie . See SESSION_COOKIE_HTTPONLY for details on HttpOnly . CSRF_COO ... cookie from being sent in cross-site requests. See SESSION_COOKIE_SAMESITE for details about SameSite . CSRF_ ... ie is only sent with an HTTPS connection. CSRF_USE_SESSIONS ¶ デフォルト値: False Whether to store the CSRF t ...
-
https://man.plustar.jp/django/ref/settings.html
- [similar]
- Django 1.8.4 リリースノート — Django 4.0.6 ドキュメント 9050
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... of-service possibility in logout() view by filling session store ¶ Previously, a session could be created whe ... could allow an attacker to easily create many new session records by sending repeated requests, potentially ... filling up the session store or causing other users' session records to b ... e evicted. The SessionMiddleware has been modified to no longer create em ...
-
https://man.plustar.jp/django/releases/1.8.4.html
- [similar]
- Django 1.5.3 release notes — Django 4.0.6 ドキュメント 8839
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
... feature to enhance the security of django.contrib.sessions . Directory traversal vulnerability in ssi templa ... ote-code execution vulnerability in django.contrib.sessions ¶ django.contrib.sessions currently uses pickle t ... o serialize session data before storing it in the backend. If you're u ... sing the signed cookie session backend and SECRET_KEY is known by an attacker (th ...
-
https://man.plustar.jp/django/releases/1.5.3.html
- [similar]