Ignore GobCodec.Decode errors? about scs HOT 3 CLOSED

I don't think we should change the behavior of GobCodec, I think it's important for it to always return an error if one is encountered.

If you want to ignore the error in specific scenarios, then I believe the right way to do this is to implement your own custom GobCodec type, just like you have with TryGobCodec. Although I'd suggest that you check for a specific expected error and choose to ignore it, rather than just ignoring all errors completely.

from scs.

Thank you very much for your reply. I absolutely agree with you that an error should always be returned if one is encountered.

I still see the risk that a developer might unwittingly modify the gob serialization format of a custom data type which is stored in a session. That would result in visitors getting internal server errors if their session still holds data in the old serialization format.

A custom ErrorFunc which clears the session (if the error is a gob error) is probably a better solution for this.

from scs.

A custom ErrorFunc which clears the session (if the error is a gob error) is probably a better solution for this.

Good idea, I think that could be a nice approach to this.

from scs.