although the security issue was serious, if someone got your secret salt, they can forge cookies.

Reply to this note

Please Login to reply.

Discussion

yeah I suppose if anyone thinks they've been attacked they should change their SECRET_KEY_BASE