Merge pull request #4710 from jmchilton/id_secret_fix

[17.09] Append fewer characters to id_secret by default for encrypting csrf tokens.
2026-09-24 16:30:27 +08:00 · 2017-09-27 14:22:00 -04:00
parent 7775d429b6 89ce44803e
commit d41f4ce0ec
1 changed files with 1 additions and 1 deletions
@@ -888,7 +888,7 @@ class GalaxyWebTransaction(base.DefaultWebTransaction,
        token = ''
        if self.galaxy_session:
            token = self.security.encode_id(
-                self.galaxy_session.id, kind="session_csrf_token"
+                self.galaxy_session.id, kind="csrf"
            )
        return token