webpy/webpy — pull request #109 by beardedprojamz (2011-10-12 16:24:15+00:00)
Title: Session Initializer Security Flaw Fix

Updating session code to create a new copy of the initializer object with each new session. Caused major security issues at my company. This flaw allowed new users to log in as the last session used by Web.py.

I used deepcopy, because we set our initializer to a nested dictionary and normal copy() doesn't cut it.