LAB-linuxserver/core
1
0
Fork 0
mirror of https://github.com/linuxserver/core.git synced 2026-02-20 05:07:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request +7970 from c9/fix-javascript-token

Browse Source 
Make sure generated tokens are never valid JavaScript
This commit is contained in:
Lennart Kats 2015-06-25 14:13:45 +02:00
commit a65656baee
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
node_modules/c9/uid.js generated vendored
View File

@ -8,5 +8,8 @@ module.exports = function(length) {
.toString("base64")
.replace(/[^a-zA-Z0-9]/g, "");
}
return uid.slice(0, length);
// HACK: make sure unique id is never syntactically valid JavaScript
// See http://balpha.de/2013/02/plain-text-considered-harmful-a-cross-domain-exploit/
uid = "9c" +uid.slice(0, length - 2);
return uid;
};