increase the size of CSRF token

2020-05-01 00:40:11 -03:00 · 2020-05-01 00:40:11 -03:00 · c39b165ff3
commit c39b165ff3
parent 7f37d2b6fa
3 changed files with 6 additions and 2 deletions
--- a/yesod-core/ChangeLog.md
+++ b/yesod-core/ChangeLog.md
@ -1,5 +1,9 @@
 # ChangeLog for yesod-core

+## 1.6.18.1
+
+* Increase the size of CSRF token
+
 ## 1.6.18

 * Add functions for setting description and OG meta [#1663](https://github.com/yesodweb/yesod/pull/1663)
--- a/yesod-core/src/Yesod/Core/Internal/Request.hs
+++ b/yesod-core/src/Yesod/Core/Internal/Request.hs
@ -129,7 +129,7 @@ parseWaiRequest env session useToken mmaxBodySize =
                -- Already have a token, use it.
                Just bs -> Left $ Just $ decodeUtf8With lenientDecode bs
                -- Don't have a token, get a random generator and make a new one.
-                Nothing -> Right $ fmap Just . randomString 10
+                Nothing -> Right $ fmap Just . randomString 40
        | otherwise = Left Nothing

 textQueryString :: W.Request -> [(Text, Text)]
--- a/yesod-core/yesod-core.cabal
+++ b/yesod-core/yesod-core.cabal
@ -1,5 +1,5 @@
 name:            yesod-core
-version:         1.6.18
+version:         1.6.18.1
 license:         MIT
 license-file:    LICENSE
 author:          Michael Snoyman <michael@snoyman.com>