mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #24553 from nextcloud/backport/24550/stable20 

[stable20] Generate a new session id if the decrypting the session data fails
This commit is contained in:
Roeland Jago Douma 2020-12-04 16:09:52 +01:00 committed by GitHub
parent c7cb8eb007 f52337e8be
commit 233d4164a6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/private/Session/CryptoSessionData.php
View File

@ -87,6 +87,7 @@ class CryptoSessionData implements \ArrayAccess, ISession {
); );
} catch (\Exception $e) { } catch (\Exception $e) {
$this->sessionValues = []; $this->sessionValues = [];
$this->regenerateId(true, false);
} }
} }