mirror of
https://github.com/django/django.git
synced 2025-10-18 19:29:13 +00:00
The session record is now only created if/when the session is modified. This prevents a potential DoS via creation of many empty session records. This is a security fix; disclosure to follow shortly.