From bd6efcfc1473b519a637fbe2a24ff5d9282c60f4 Mon Sep 17 00:00:00 2001
From: Xavier Morel <xmo@openerp.com>
Date: Tue, 15 Oct 2013 11:53:07 +0200
Subject: [PATCH] [FIX] removal of session_id from params, may not be only in
 GET params

bzr revid: xmo@openerp.com-20131015095307-3m1gc71dt3zihm26
---
 addons/web/http.py | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/addons/web/http.py b/addons/web/http.py
index 96b7275343d..b5d5fae3d63 100644
--- a/addons/web/http.py
+++ b/addons/web/http.py
@@ -400,12 +400,10 @@ class HttpRequest(WebRequest):
     def __init__(self, *args):
         super(HttpRequest, self).__init__(*args)
         params = dict(self.httprequest.args)
-        ex = set(["session_id"])
-        for k in params.keys():
-            if k in ex:
-                del params[k]
         params.update(self.httprequest.form)
         params.update(self.httprequest.files)
+
+        params.pop('session_id', None)
         self.params = params
 
     def dispatch(self):