discourse/lib/secure_session.rb

# frozen_string_literal: true

# session that is not stored in cookie, expires after 1.hour unconditionally
class SecureSession
  def initialize(prefix)
    @prefix = prefix
  end

  def [](key)
    $redis.get("#{@prefix}#{key}")
  end

  def []=(key, val)
    if val == nil
      $redis.del("#{@prefix}#{key}")
    else
      $redis.setex("#{@prefix}#{key}", 1.hour, val.to_s)
    end
  end
end
DEV: enable frozen string literal on all files This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging 2019-05-03 08:17:27 +10:00			`# frozen_string_literal: true`

SECURITY: prevent reuse of password reset 2016-12-19 18:00:22 +11:00			`# session that is not stored in cookie, expires after 1.hour unconditionally`
			`class SecureSession`
			`def initialize(prefix)`
			`@prefix = prefix`
			`end`

			`def [](key)`
			`$redis.get("#{@prefix}#{key}")`
			`end`

Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00			`def []=(key, val)`
SECURITY: prevent reuse of password reset 2016-12-19 18:00:22 +11:00			`if val == nil`
			`$redis.del("#{@prefix}#{key}")`
			`else`
			`$redis.setex("#{@prefix}#{key}", 1.hour, val.to_s)`
			`end`
			`end`
			`end`