TurboGears/tg2docs — pull request #19 by moschlar (2013-01-26 12:49:03+00:00)
Title: Warn about using cookies for session storage

Possible exploits using malicious pickled objects are only possible
when cookies are used as storage backend.
Users should be explicitly warned about that and use the filesystem
storage instead - but they should also be aware of the cleanup they
will then need to perform manually.