Changes for version 0.41 - 2018-12-05

  • Don't let an evil session ID supplier have an easy XSS vector (Michael McClimon++)


Understanding and using sessions.


Generic Session plugin - ties together server side storage and client side state required to maintain session data.
Base class for session state preservation plugins.
Base class for session storage drivers.
Doesn't really store sessions - useful for tests.
Reusable sanity for session storage engines.