mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

Fixed #33606 -- Cleansed sessionid cookie in error reports.

Browse Source 
Co-authored-by: Simon Charette <charette.s@gmail.com>
This commit is contained in:
Tobias Bengfort
2022-10-26 12:30:44 +02:00
committed by Carlton Gibson
parent b440493eaa
commit 350455b666
4 changed files with 31 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/view_tests/tests/test_debug.py
View File

@@ -1696,6 +1696,12 @@ class ExceptionReporterFilterTests(
)
self.assertNotIn(b"super_secret", response.content)
@override_settings(SESSION_COOKIE_NAME="djangosession")
def test_cleanse_session_cookie_value(self):
self.client.cookies.load({"djangosession": "should not be displayed"})
response = self.client.get("/raises500/")
self.assertNotContains(response, "should not be displayed", status_code=500)
class CustomExceptionReporterFilter(SafeExceptionReporterFilter):
cleansed_substitute = "XXXXXXXXXXXXXXXXXXXX"