3 ms·
It is relevant to this: > I . . . decoded _gist_session cookie (which is regular Rails Base64 encoded cookie) In Rails 4 the session cookie is encrypted with
by pjungwir 13y ago
It is relevant to this:
> I . . . decoded _gist_session cookie (which is regular Rails Base64 encoded cookie)
In Rails 4 the session cookie is encrypted with a server-side secret, so the end user can't decipher it.
- steveklabnik 13y agoIsn't gist an entirely separate application from dotcom? My impression was gist is a Sinatra app, not Rails.
- kneath 13y agoGist is indeed running Rails 4.