Skip to content

Conversation

@danxuliu
Copy link
Member

When session_lifetime can not be converted to a number the interval becomes a NaN due to dividing it by 2. This NaN was dragged over all the other mathematical operations and caused the csrftoken to be got again and again due to an infinite loop with no pauses in setInterval. Now, the interval is set to the default value instead if the session_lifetime can not be converted to a number.

When "session_lifetime" can not be converted to a number the interval
becomes a NaN due to dividing it by 2. This NaN was "dragged" over all
the other mathematical operations and caused the csrftoken to be got
again and again due to an infinite loop with no pauses in "setInterval".
Now, the interval is set to the default value instead if the
"session_lifetime" can not be converted to a number.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
Copy link
Member

@ChristophWurst ChristophWurst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wow, nice catch! Thanks!

@rullzer rullzer merged commit fa15c5e into master Oct 11, 2018
@rullzer rullzer deleted the ignore-session-lifetime-if-it-can-not-be-converted-to-a-number branch October 11, 2018 09:42
@MorrisJobke
Copy link
Member

Fixes #11747

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants