orbit-oss/flask
4
4
Fork 2
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'stable'

Browse source
This commit is contained in:
David Lord 2025-05-13 08:10:30 -07:00
commit e7e5380776
No known key found for this signature in database
GPG key ID: 43368A7AA8CC5926
4 changed files with 24 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/flask/sessions.py
View file

@ -318,11 +318,12 @@ class SecureCookieSessionInterface(SessionInterface):
if not app.secret_key:
return None
keys: list[str | bytes] = [app.secret_key]
keys: list[str | bytes] = []
if fallbacks := app.config["SECRET_KEY_FALLBACKS"]:
keys.extend(fallbacks)
keys.append(app.secret_key) # itsdangerous expects current key at top
return URLSafeTimedSerializer(
keys, # type: ignore[arg-type]
salt=self.salt,