[server/xsrf] shorten the xsrf-token, 512 character is overkill

spalger · Nov 10, 2015 · 7eefb18 · 7eefb18
1 parent b4517cb
commit 7eefb18
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/server/config/schema.js b/src/server/config/schema.js
@@ -42,7 +42,7 @@ module.exports = () => Joi.object({
       otherwise: Joi.boolean().default(false)
     }),
     xsrf: Joi.object({
-      token: Joi.string().default(randomBytes(256).toString('hex')),
+      token: Joi.string().default(randomBytes(32).toString('hex')),
       disableProtection: Joi.boolean().default(false),
     }).default(),
   }).default(),