mirror/outline
1
0
Fork 0
mirror of https://github.com/outline/outline.git synced 2025-12-30 07:19:52 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix: Validation of SECRET_KEY environment variable is too loose (#10897)

Browse Source
This commit is contained in:
Tom Moor
2025-12-13 12:51:33 -05:00
committed by GitHub
parent 2e48ed8cd1
commit e2e8d23428
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
server/env.ts
View File

@@ -8,7 +8,8 @@ import {
IsNotEmpty,
IsUrl,
IsOptional,
IsByteLength,
IsHexadecimal,
Length,
IsNumber,
IsIn,
IsEmail,
@@ -65,8 +66,9 @@ export class Environment {
* The secret key is used for encrypting data. Do not change this value once
* set or your users will be unable to login.
*/
@IsByteLength(32, 64, {
message: `The SECRET_KEY environment variable is invalid (Use \`openssl rand -hex 32\` to generate a value).`,
@IsHexadecimal()
@Length(64, 64, {
message: `The SECRET_KEY environment variable must be exactly 64 hexadecimal characters (Use \`openssl rand -hex 32\` to generate a value).`,
})
public SECRET_KEY = environment.SECRET_KEY ?? "";