joshuakarjala/django-hunger — Issue #3: Setting in_beta via cookies is insecure.
Author: yesimon
Created: 2012-02-26 08:34:48+00:00
State: open

Anybody can change their cookies via an easy to use browser extension. I suggest using the django sessions framework to save these settings instead of setting a cookie.