[server/xsrf] shorten the xsrf-token, 512 character is overkill

This commit is contained in:
spalger 2015-11-10 10:35:09 -06:00
parent b4517cbe5c
commit 7eefb183e1

View file

@ -42,7 +42,7 @@ module.exports = () => Joi.object({
otherwise: Joi.boolean().default(false)
}),
xsrf: Joi.object({
token: Joi.string().default(randomBytes(256).toString('hex')),
token: Joi.string().default(randomBytes(32).toString('hex')),
disableProtection: Joi.boolean().default(false),
}).default(),
}).default(),