Skip to content

[CASB-122624] add logging on corrupted session #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
symc-gail wants to merge 1 commit into
base: elastica-stable-1.5.6-security-release
Choose a base branch
from
Open

[CASB-122624] add logging on corrupted session #4

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions django/contrib/sessions/backends/el_db.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,8 @@ def decode(self, session_data):
def _decode_with_single_key(self, hash_val, serialized):
expected_hash = self._hash(serialized)
if not constant_time_compare(hash_val.decode(), expected_hash):
# logging using print because there is no logger here
print("Session data is corrupted!")
raise SuspiciousOperation("Session data corrupted")

return self.serializer().loads(serialized)
Expand All @@ -57,4 +59,6 @@ def _decode_with_multiple_keys(self, hash_val, serialized):
# If here, that means session got decoded
return self.serializer().loads(serialized)
# If here, then we've exhausted all the keys, raise Exception
# logging using print because there is no logger here
print("Session data is corrupted!")
raise SuspiciousOperation("Session data corrupted")