Stop relying on PickleSerializer

knatten · knatten · commit 489f08752907 · 2025-02-21T09:35:10.000+01:00
PickleSerializer has security holes and is deprecated. It is removed in Django 5. Fixes #348
diff --git a/cppquiz/settings.py b/cppquiz/settings.py
@@ -179,7 +179,7 @@
     },
 }
 
-SESSION_SERIALIZER = 'django.contrib.sessions.serializers.PickleSerializer'
+SESSION_SERIALIZER = 'django.contrib.sessions.serializers.JSONSerializer'
 
 TOP_WARNING = ''
 

Original file line number	Diff line number	Diff line change
`@@ -179,7 +179,7 @@`
`179`	`179`	`},`
`180`	`180`	`}`
`181`	`181`
`182`		`-SESSION_SERIALIZER = 'django.contrib.sessions.serializers.PickleSerializer'`
	`182`	`+SESSION_SERIALIZER = 'django.contrib.sessions.serializers.JSONSerializer'`
`183`	`183`
`184`	`184`	`TOP_WARNING = ''`
`185`	`185`