You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Gusted 623c93ff46 Increase Salt randomness (#18179) ... - The current implementation of `RandomString` doesn't give you a most-possible unique randomness. It gives you 6*`length` instead of the possible 8*`length` bits(or as `length`x bytes) randomness. This is because `RandomString` is being limited to a max value of 63, this in order to represent the random byte as a letter/digit. - The recommendation of pbkdf2 is to use 64+ bit salt, which the `RandomString` doesn't give with a length of 10, instead of increasing 10 to a higher number, this patch adds a new function called `RandomBytes` which does give you the guarentee of 8*`length` randomness and thus corresponding of `length`x bytes randomness. - Use hexadecimal to store the bytes value in the database, as mentioned, it doesn't play nice in order to convert it to a string. This will always be a length of 32(with `length` being 16). - When we detect on `Authenticate`(source: db) that a user has the old format of salt, re-hash the password such that the user will have it's password hashed with increased salt. Thanks to @zeripath for working out the rouge edges from my first commit 😄. Co-authored-by: lafriks <lauris@nix.lv> Co-authored-by: zeripath <art27@cantab.net>		3 years ago
..
compare.go	Simplify parameter types (#18006)	3 years ago
copy.go	migrate from com.* to alternatives (#14103)	4 years ago
io.go	Read expected buffer size (#17409)	3 years ago
net.go	Only allow webhook to send requests to allowed hosts (#17482)	3 years ago
paginate.go	…
paginate_test.go	…
path.go	Include folders into size cost (#18158)	3 years ago
path_test.go	…
remove.go	Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479)	3 years ago
sanitize.go	Add push to remote mirror repository (#15157)	3 years ago
sanitize_test.go	Add push to remote mirror repository (#15157)	3 years ago
shellquote.go	…
shellquote_test.go	Fix various documentation, user-facing, and source comment typos (#16367)	3 years ago
timer.go	…
truncate.go	Fix a panic in NotifyCreateIssueComment (caused by string truncation) (#17928)	3 years ago
truncate_test.go	Fix a panic in NotifyCreateIssueComment (caused by string truncation) (#17928)	3 years ago
url.go	Re-attempt to delete temporary upload if the file is locked by another process (#12447)	4 years ago
util.go	Increase Salt randomness (#18179)	3 years ago
util_test.go	Increase Salt randomness (#18179)	3 years ago