Merge pull request #1672 from amkhlv/master

increase the size of CSRF token
2020-05-01 13:35:16 +03:00 · 2020-05-01 13:35:16 +03:00 · 2b5bf7b9b9
commit 2b5bf7b9b9
parent 7f37d2b6fa c39b165ff3
3 changed files with 6 additions and 2 deletions
--- a/yesod-core/ChangeLog.md
+++ b/yesod-core/ChangeLog.md
@ -1,5 +1,9 @@
 # ChangeLog for yesod-core

+## 1.6.18.1
+
+* Increase the size of CSRF token
+
 ## 1.6.18

 * Add functions for setting description and OG meta [#1663](https://github.com/yesodweb/yesod/pull/1663)
--- a/yesod-core/src/Yesod/Core/Internal/Request.hs
+++ b/yesod-core/src/Yesod/Core/Internal/Request.hs
@ -129,7 +129,7 @@ parseWaiRequest env session useToken mmaxBodySize =
                -- Already have a token, use it.
                Just bs -> Left $ Just $ decodeUtf8With lenientDecode bs
                -- Don't have a token, get a random generator and make a new one.
-                Nothing -> Right $ fmap Just . randomString 10
+                Nothing -> Right $ fmap Just . randomString 40
        | otherwise = Left Nothing

 textQueryString :: W.Request -> [(Text, Text)]
--- a/yesod-core/yesod-core.cabal
+++ b/yesod-core/yesod-core.cabal
@ -1,5 +1,5 @@
 name:            yesod-core
-version:         1.6.18
+version:         1.6.18.1
 license:         MIT
 license-file:    LICENSE
 author:          Michael Snoyman <michael@snoyman.com>