csrfGenerateToken() returns an empty string

Description

At least with sessionCluster = false, this function returns an empty string regardless of the arguments passed. This occurred somewhere between the 5.3.7 release and 5.3.8.102.

Environment

None

Activity

Show:
Pothys - MitrahSoft
December 15, 2020, 11:25 AM

I've added a test case for this ticket.

Pull Request: https://github.com/lucee/Lucee/pull/1124

Michael Offner
December 18, 2020, 2:15 PM

most likely related to

Michael Offner
December 18, 2020, 3:46 PM

Michael Offner
December 18, 2020, 3:48 PM

please give this a try and also test again LDEV-784

Pothys - MitrahSoft
December 21, 2020, 2:36 PM
Edited

, I've checked this ticket with fixed version 5.3.8.129-SNAPSHOT. It works fine now. CSRFGenerateToken() returns key with or without any arguments.

The above commit is not related to this ticket, that is related to LDEV-3122.

This is the commit for this ticket:
https://github.com/lucee/Lucee/commit/685f4a807874427231de8d5d512c10b66e6530c7

Fixed

Assignee

Pothys - MitrahSoft

Reporter

Samuel W. Knowlton

Priority

Blocker

Fix versions

Affects versions