koji

#3393 Used vs. Accepted Session ID Exchange Mechanisms
Closed: Fixed by tkopecek. Opened by jcupova.

Closed: Fixed
Reopen Issue

Koji is using Session ID in URL. We should drop it.
More info: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#used-vs-accepted-session-id-exchange-mechanisms

Agreed

Metadata Update from @mikem:
- Custom field Size adjusted to None

PR #3426

Metadata Update from @tkopecek:
- Issue set to the milestone: 1.31

Metadata Update from @tkopecek:
- Issue tagged with: testing-ready

Metadata Update from @jobrauer:
- Issue tagged with: testing-done

Commit fcee31ab fixes this issue

Commit 850a161e relates to this ticket

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/3393

Please continue any further discussion there.
Metadata
None

backlog testing-done testing-ready

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.