Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore "session_lifetime" if it can not be converted to a number #11756

Merged

Conversation

danxuliu
Copy link
Member

When session_lifetime can not be converted to a number the interval becomes a NaN due to dividing it by 2. This NaN was dragged over all the other mathematical operations and caused the csrftoken to be got again and again due to an infinite loop with no pauses in setInterval. Now, the interval is set to the default value instead if the session_lifetime can not be converted to a number.

When "session_lifetime" can not be converted to a number the interval
becomes a NaN due to dividing it by 2. This NaN was "dragged" over all
the other mathematical operations and caused the csrftoken to be got
again and again due to an infinite loop with no pauses in "setInterval".
Now, the interval is set to the default value instead if the
"session_lifetime" can not be converted to a number.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
Copy link
Member

@ChristophWurst ChristophWurst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wow, nice catch! Thanks!

@rullzer rullzer merged commit fa15c5e into master Oct 11, 2018
@rullzer rullzer deleted the ignore-session-lifetime-if-it-can-not-be-converted-to-a-number branch October 11, 2018 09:42
@MorrisJobke
Copy link
Member

Fixes #11747

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants