From 7f247ae086215b3bd6ca0c3680247463e9b4fd25 Mon Sep 17 00:00:00 2001
From: Eliot Partridge <shortcircuit369@gmail.com>
Date: Wed, 18 Sep 2019 18:39:17 -0500
Subject: [PATCH] Update secret/token security checks

---
 src/ts/server/config.ts | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/src/ts/server/config.ts b/src/ts/server/config.ts
index eb2ea28..f7d272a 100644
--- a/src/ts/server/config.ts
+++ b/src/ts/server/config.ts
@@ -58,15 +58,20 @@ export const args = argv as AppArgs;
 export const { version, description }: AppPackage = require('../../../package.json');
 export const config: AppConfig = require('../../../config.json');
 
+const INSECURE_RANDOM_VALUES = [
+	'gfhfdshtrdhgedryhe4t3y5uwjthr',
+	'sdlfgihsdor8ghor8dgdrgdegrdg',
+	'<some_random_string_here>',
+	'<some_other_random_string_here>',
+];
+
 if (!DEVELOPMENT && !TESTS &&
 	(!config.secret || !config.token
 	|| config.secret.length < 16
 	|| config.token.length < 16
 	|| config.secret === config.token
-	|| config.secret === 'gfhfdshtrdhgedryhe4t3y5uwjthr'
-	|| config.token === 'sdlfgihsdor8ghor8dgdrgdegrdg'
-	|| config.secret === '<some_random_string_here>'
-	|| config.token === '<some_random_string_here>')) {
+	|| INSECURE_RANDOM_VALUES.includes(config.secret)
+	|| INSECURE_RANDOM_VALUES.includes(config.token))) {
 	console.error(
 `
 ================================================================================