vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: Randomize key length to make it harder to brute force

Browse source
This commit is contained in:
Suraj Shetty 2022-06-01 16:59:22 +05:30
parent 59c7fb9e0d
commit 105b398c68
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
frappe/core/doctype/document_share_key/document_share_key.py
View file

@ -3,11 +3,12 @@
import frappe
from frappe.model.document import Document
from random import randrange
class DocumentShareKey(Document):
def before_insert(self):
self.key = frappe.generate_hash(length=32)
self.key = frappe.generate_hash(length=randrange(25, 35))
if not self.expires_on and not self.flags.no_expiry:
self.expires_on = frappe.utils.add_days(
None, days=frappe.get_system_settings("document_share_key_expiry") or 90