Refactor: remove use of request.session

[ietf-svn-bot]

owner:rcross@amsl.com resolution_fixed type_defect | by rcross@amsl.com

---

Use hidden fields for multipage forms instead of request.session.

---

Issue migrated from trac:1455 at 2022-03-04 03:48:36 +0000

[ietf-svn-bot]

@rcross@amsl.com commented

---

More information:
The secretariat drafts app makes extensive use of this feature to manage multi-page processes for performing actions on a draft. If a user initiates multiple multi-page sequences, in different tabs of the browser, the session data, meant to only handle one sequence at a time, can be corrupted.

Example:

• Go here: /secr/drafts/[some draft]
• click New Revision
• upload a new file and save
• pause on confirmation page
• open a new tab
• repeat process above to confirmation page
• click cancel
• return to first tab
• click save

Django Version: 1.10.7
Exception Type: KeyError
Exception Value:
'action'

[ietf-svn-bot]

@rcross@amsl.com changed status from new to closed

[ietf-svn-bot]

@rcross@amsl.com changed resolution from `` to fixed

[ietf-svn-bot]

@rcross@amsl.com commented

---

Fixed in 915b445:

Remove all use of request.session from secretariat apps. Add tests for affected views. Fixes #1455. Commit ready for merge.

[ietf-svn-bot]

@henrik@levkowetz.com commented

---

Fixed in 2070bbf:

Merged in 3a2cb9d and 915b445 from rcross@amsl.com:
Remove all use of request.session from secretariat apps. Add tests for affected views. Fixes #1455.