]> source.dussan.org Git - sonarqube.git/commitdiff
SONAR-7761 User should not be logged out in sessions/new page
authorJulien Lancelot <julien.lancelot@sonarsource.com>
Mon, 18 Jul 2016 16:19:19 +0000 (18:19 +0200)
committerJulien Lancelot <julien.lancelot@sonarsource.com>
Tue, 19 Jul 2016 07:17:08 +0000 (09:17 +0200)
server/sonar-web/src/main/webapp/WEB-INF/app/controllers/sessions_controller.rb

index 44adf224fc8f9649bf296135884510460cade52b..51e8fda5ae0483a538b6e033755ef53daea4484a 100644 (file)
@@ -45,9 +45,6 @@ class SessionsController < ApplicationController
     # else the original uri can be set by ApplicationController#access_denied
     end
     @return_to = get_redirect_back_or_default(home_url)
-
-    # Needed to bypass session fixation vulnerability (https://jira.sonarsource.com/browse/SONAR-6880)
-    reset_session
   end
 
   private