Merge pull request #24553 from nextcloud/backport/24550/stable20

[stable20] Generate a new session id if the decrypting the session data fails
This commit is contained in:
Roeland Jago Douma 2020-12-04 16:09:52 +01:00 committed by GitHub
commit 233d4164a6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions

View File

@ -87,6 +87,7 @@ class CryptoSessionData implements \ArrayAccess, ISession {
);
} catch (\Exception $e) {
$this->sessionValues = [];
$this->regenerateId(true, false);
}
}