ston1th/gowiki
0
0
Fork 0
Code Issues 2 Releases Activity

move to base64 urlencoding for xsrf

Browse source
This commit is contained in:
ston1th 2018-12-28 19:21:14 +01:00
commit 2e70a95bcd
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
pkg/server/xsrf.go
View file

@ -22,11 +22,11 @@ func genKey(length int) (bytes []byte) {
func newXsrf(secret []byte) string { func newXsrf(secret []byte) string {
rnd := genKey(keySize) rnd := genKey(keySize)
return base64.RawStdEncoding.EncodeToString(append(rnd, xor(rnd, secret)...)) return base64.RawURLEncoding.EncodeToString(append(rnd, xor(rnd, secret)...))
} }
func checkXsrf(xsrf string, secret []byte) bool { func checkXsrf(xsrf string, secret []byte) bool {
t, err := base64.RawStdEncoding.DecodeString(xsrf) t, err := base64.RawURLEncoding.DecodeString(xsrf)
if err != nil { if err != nil {
return false return false
} }