Skip to content

Instantly share code, notes, and snippets.

@nhooyr

nhooyr/gist:7741caa85ebe23955983218c05da4c3c

Last active February 11, 2017 18:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nhooyr/7741caa85ebe23955983218c05da4c3c to your computer and use it in GitHub Desktop.
Save nhooyr/7741caa85ebe23955983218c05da4c3c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
In the "logging in" section of Programming Phoenix,
it says that using the :renew option to configure_session
is important to prevent session fixation attacks. However, aren't
these already impossible because the cookie that phoenix is storing
the session inside is signed? How could an attacker fixate the session ID?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment