mirror of
https://github.com/fish-shell/fish-shell.git
synced 2025-02-20 22:59:23 +08:00

- Require all requests to use a session path. - Use a redirect file to avoid exposing the '/start' URL on the command line, as it contains the cookie value. Fix for CVE-2014-2914. Closes #1438.