David Lord

itsdangerous 1.1.0 was just released and contains a fix for this. Flask-Session should still be fixed so it doesn't rely on this, but it won't fail for now.

itsdangerous 1.1.0 was just released and contains a fix for this. Flask-Session should still be fixed so it doesn't rely on this, but it won't fail for now.

As far as I understand it, `autocorrect_location_header` has always produced full URLs, not just paths. If you don't want that behavior, you can set `Response.autocorrect_location_header = False`, but I'm not...

I'm considering whether we should get rid of a lot of the `REMEMBER_COOKIE_` config and have it use the same values as Flask's `SESSION_` config. It seems the only ones...

I don't care about breaking changes in this case, because of how much confusion this already causes. I'll deprecate `AnonymousUserMixin` first if possible, then remove it. I'm all for more...

Somewhat interesting, the tests already never set the attribute, they always set the config.

I'd rather just have `session.clear()`. If users want to preserve something, they can store the value before calling `login_user` and restore it afterwards.

I want to do `session.clear()`, so you're going to have to figure out how to address that. I don't know what that test is testing, but it sounds like it...

2.0 is imminent, and this still hasn't been fixed, despite us issuing a deprecation warning for a year now. Flask-Testing will no longer work with Flask 2.0 unless this is...

> the versions of tox and pre-commit are actually not the version used during the test We now use pre-commit.ci which uses a specific pre-commit image, but pre-commit has other...