From e3dfb26b904edb4645fee4b43e93a6d54e2e8041 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Wed, 23 Aug 2017 13:13:23 -0400 Subject: emailauth, passwordauth: Avoid leaving cgisess_* files in the system temp directory. Due to the use/abuse of CGI::Session to generate a token for the login process, a new session database was created for each login, and left behind afterwards. While each file is small, with many logings this could bloat the size of /tmp significantly. Fixed by making CGI::Session write to /dev/null, since there does not seem to be a way to entirely prevent the writing. This commit was sponsored by Henrik Riomar on Patreon. --- debian/changelog | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 9c114bc3a..55a55bba0 100644 --- a/debian/changelog +++ b/debian/changelog @@ -9,6 +9,10 @@ ikiwiki (3.20170623) UNRELEASED; urgency=medium * core: Don't decode the result of strftime if it is already tagged as UTF-8, as it might be since Perl >= 5.21.1. (Closes: #869240) + [ Joey Hess ] + * emailauth, passwordauth: Avoid leaving cgisess_* files in the + system temp directory. + -- Joey Hess Tue, 11 Jul 2017 15:48:39 -0400 ikiwiki (3.20170622) unstable; urgency=medium -- cgit v1.2.3