From 9083927c6ac1a44c393c021d4f24c06da5758034 Mon Sep 17 00:00:00 2001 From: astaxie Date: Tue, 27 May 2014 15:00:10 +0800 Subject: [PATCH] beego: enhance the XSRFKEY from 15 to 32 #620 --- controller.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controller.go b/controller.go index 71287811..c9d5b72c 100644 --- a/controller.go +++ b/controller.go @@ -452,7 +452,7 @@ func (c *Controller) XsrfToken() string { } else { expire = int64(XSRFExpire) } - token = string(utils.RandomCreateBytes(15)) + token = string(utils.RandomCreateBytes(32)) c.SetSecureCookie(XSRFKEY, "_xsrf", token, expire) } c._xsrf_token = token