search

porscheinformatik / tapestry-csrf-protection

Tapestry CSRF Protection
Apache License 2.0
10 stars 9 forks source link

Better generation of CSRF token #2

Closed derkoe closed 10 years ago

derkoe commented 10 years ago

CSRF token is currently generated as a Integer with SecureRandom. This should be changed to a longer number coded in ASCII - like a session id.