From cb1ee1ba1cddb9aaeab3bed68d1ecd71f5ea8af0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= <fpeters@entrouvert.com>
Date: Mon, 9 Oct 2023 11:54:19 +0200
Subject: [PATCH] misc: clean more session attributes on session change
 (#14216)

---
 wcs/qommon/sessions.py | 2 ++
 wcs/sessions.py        | 6 ++++++
 2 files changed, 8 insertions(+)

diff --git a/wcs/qommon/sessions.py b/wcs/qommon/sessions.py
index c5744669d..a1e11b9da 100644
--- a/wcs/qommon/sessions.py
+++ b/wcs/qommon/sessions.py
@@ -164,6 +164,8 @@ class Session(QommonSession, CaptchaSession, StorableObject):
     def set_user(self, user_id):  # noqa pylint: disable=arguments-renamed
         self.id = None  # force a new session id to be assigned
         self.extra_user_variables = None
+        self.has_uploads = False
+        self.jsonp_display_values = None
         QuixoteSession.set_user(self, user_id)
         if user_id is None:
             return
diff --git a/wcs/sessions.py b/wcs/sessions.py
index b105bf3f2..37ec7d8b0 100644
--- a/wcs/sessions.py
+++ b/wcs/sessions.py
@@ -115,6 +115,12 @@ class BasicSession(Session):
                 del session.visiting_objects[object_key]
                 session.store()
 
+    def set_user(self, user_id):
+        super().set_user(user_id)
+        if self.user:
+            self.anonymous_formdata_keys = None
+            self.magictokens = None
+
 
 sessions.BasicSession = BasicSession
 StorageSessionManager = sessions.StorageSessionManager