On 6/19/19 9:39 AM, Oguz Bektas wrote:
> we use sha1 while generating our csrf token, switched to hmac sha256 as
> suggested in owasp csrf cheatsheet[0].
>
> [0]:
> https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md#token-based-m
we use sha1 while generating our csrf token, switched to hmac sha256 as
suggested in owasp csrf cheatsheet[0].
[0]:
https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md#token-based-mitigation
pve-access-control:
Oguz Bektas (1):
