csrfGenerateToken() returns an empty string

Description

At least with sessionCluster = false, this function returns an empty string regardless of the arguments passed. This occurred somewhere between the 5.3.7 release and 5.3.8.102.

Environment

None

Activity

Show:

Pothys - MitrahSoft 21 December 2020 at 14:36
Edited

, I've checked this ticket with fixed version 5.3.8.129-SNAPSHOT. It works fine now. CSRFGenerateToken() returns key with or without any arguments.

The above commit is not related to this ticket, that is related to LDEV-3122.

This is the commit for this ticket:
https://github.com/lucee/Lucee/commit/685f4a807874427231de8d5d512c10b66e6530c7

Michael Offner 18 December 2020 at 15:48

please give this a try and also test again LDEV-784

Michael Offner 18 December 2020 at 14:15

Pothys - MitrahSoft 15 December 2020 at 11:25

I've added a test case for this ticket.

Pull Request: https://github.com/lucee/Lucee/pull/1124

Fixed

Details

Assignee

Reporter

Priority

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Created 10 December 2020 at 23:24
Updated 21 December 2020 at 14:47
Resolved 21 December 2020 at 14:39

Flag notifications