/usr/lib/ruby/vendor_ruby/action_dispatch/middleware/session/abstract_store.rb is in ruby-actionpack 2:4.2.10-0ubuntu4.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 | require 'rack/utils'
require 'rack/request'
require 'rack/session/abstract/id'
require 'action_dispatch/middleware/cookies'
require 'action_dispatch/request/session'
module ActionDispatch
module Session
class SessionRestoreError < StandardError #:nodoc:
attr_reader :original_exception
def initialize(const_error)
@original_exception = const_error
super("Session contains objects whose class definition isn't available.\n" +
"Remember to require the classes for all objects kept in the session.\n" +
"(Original exception: #{const_error.message} [#{const_error.class}])\n")
end
end
module Compatibility
def initialize(app, options = {})
options[:key] ||= '_session_id'
super
end
def generate_sid
sid = SecureRandom.hex(16)
sid.encode!(Encoding::UTF_8)
sid
end
protected
def initialize_sid
@default_options.delete(:sidbits)
@default_options.delete(:secure_random)
end
end
module StaleSessionCheck
def load_session(env)
stale_session_check! { super }
end
def extract_session_id(env)
stale_session_check! { super }
end
def stale_session_check!
yield
rescue ArgumentError => argument_error
if argument_error.message =~ %r{undefined class/module ([\w:]*\w)}
begin
# Note that the regexp does not allow $1 to end with a ':'
$1.constantize
rescue LoadError, NameError => e
raise ActionDispatch::Session::SessionRestoreError, e, e.backtrace
end
retry
else
raise
end
end
end
module SessionObject # :nodoc:
def prepare_session(env)
Request::Session.create(self, env, @default_options)
end
def loaded_session?(session)
!session.is_a?(Request::Session) || session.loaded?
end
end
class AbstractStore < Rack::Session::Abstract::ID
include Compatibility
include StaleSessionCheck
include SessionObject
private
def set_cookie(env, session_id, cookie)
request = ActionDispatch::Request.new(env)
request.cookie_jar[key] = cookie
end
end
end
end
|