Fixing session fixation vulnerabilities in default application#88

Open

lavish wants to merge 1 commit intobalderdashy:masterfrom

Commits on Jul 21, 2022

Regenerate the session upon login/signup. This change is required to prevent session fixation attacks. Furthermore, it prevents CSRF fixation attacks by forcing the recreation of the csrfSecret ses…
lavish
committed