Terncode/pixel.horse
1
0
Fork 0
mirror of https://github.com/Terncode/pixel.horse.git synced 2026-09-24 21:55:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #133 from BytewaveMLP/security-random-values

Browse Source 
Update secret/token security checks
This commit is contained in:
Eliot Partridge
2019-09-18 18:50:16 -05:00
committed by GitHub
parent d390fd2b90 7f247ae086
commit 44305173e7
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ts/server/config.ts
+9 -4
View File
@@ -58,15 +58,20 @@ export const args = argv as AppArgs;
export const { version, description }: AppPackage = require('../../../package.json');
export const config: AppConfig = require('../../../config.json');
const INSECURE_RANDOM_VALUES = [
'gfhfdshtrdhgedryhe4t3y5uwjthr',
'sdlfgihsdor8ghor8dgdrgdegrdg',
'<some_random_string_here>',
'<some_other_random_string_here>',
];
if (!DEVELOPMENT && !TESTS &&
(!config.secret || !config.token
|| config.secret.length < 16
|| config.token.length < 16
|| config.secret === config.token
|| config.secret === 'gfhfdshtrdhgedryhe4t3y5uwjthr'
|| config.token === 'sdlfgihsdor8ghor8dgdrgdegrdg'
|| config.secret === '<some_random_string_here>'
|| config.token === '<some_random_string_here>')) {
|| INSECURE_RANDOM_VALUES.includes(config.secret)
|| INSECURE_RANDOM_VALUES.includes(config.token))) {
console.error(
`
================================================================================