Do I need to handle exceptions if the data arrives from the session?

Question

Django

I have the following code in the view:

def test_func(self):
    folder_pk = self.request.session['folder_pk']
    user = Folder.objects.get(pk=folder_pk).user
    return self.request.user == user

If an attacker forges data from the session, then the user = Folder.objects.get(pk=folder_pk).userapplication may crash on the line. Is it necessary to handle such a situation, or if the old man has access to the session, it doesn’t matter if the application crashes or not, and you need to solve the problem from the other side?

Answer 1

What makes you think that outsiders have access to the session? The session is stored and populated on the backend