From 2e70a95bcd210a040ee01ebb66b32d4618f8b1c5 Mon Sep 17 00:00:00 2001 From: ston1th Date: Fri, 28 Dec 2018 19:21:14 +0100 Subject: [PATCH] move to base64 urlencoding for xsrf --- pkg/server/xsrf.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/server/xsrf.go b/pkg/server/xsrf.go index a3748ac..7cc4d3d 100644 --- a/pkg/server/xsrf.go +++ b/pkg/server/xsrf.go @@ -22,11 +22,11 @@ func genKey(length int) (bytes []byte) { func newXsrf(secret []byte) string { rnd := genKey(keySize) - return base64.RawStdEncoding.EncodeToString(append(rnd, xor(rnd, secret)...)) + return base64.RawURLEncoding.EncodeToString(append(rnd, xor(rnd, secret)...)) } func checkXsrf(xsrf string, secret []byte) bool { - t, err := base64.RawStdEncoding.DecodeString(xsrf) + t, err := base64.RawURLEncoding.DecodeString(xsrf) if err != nil { return false }