Made sanitizeToken more strict and use correct alphabet#20

Open

JoelLinn wants to merge 1 commit intojaneczku:masterfrom

JoelLinn:fix-sanitizetoken

JoelLinn commented Feb 3, 2019 •

edited

Loading

+ and = are illegal in challenge tokens (url safe variant of base64 without padding)
instead of replacing illegal characters (gsub) only accept the token if it only contains valid characters at every position and is at least one character long
newline at end of file (posix standard)


          Made sanitizeToken more strict and use correct alphabet

e7cfa15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet