uliweb.contrib.csrf 里 token 的生成是不是简化版?

[Chunlin Zhang]

这里 https://github.com/limodou/uliweb/blob/master/uliweb/contrib/csrf/__init__.py#L23
我看 wikipedia 里说的是
https://en.wikipedia.org/wiki/Cross-site_request_forgery

csrf_token = HMAC(session_token, application_secret)

[limodou]

怎么叫简化版？

--
-- ----
Project : https://github.com/limodou/uliweb
doc : http://limodou.github.com/uliweb-doc
---
You received this message because you are subscribed to the Google Groups "Uliweb" group.
To unsubscribe from this group and stop receiving emails from it, send an email to uliweb+un...@googlegroups.com.
To post to this group, send email to uli...@googlegroups.com.
Visit this group at https://groups.google.com/group/uliweb.
To view this discussion on the web visit https://groups.google.com/d/msgid/uliweb/CAG2rzAnAfgi6YTKfXEOTrCQXcFQqmxo6Jo2O-Z7Y%2BmGjKTKrnA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--

I like python!
UliPad <<The Python Editor>>: http://code.google.com/p/ulipad/
UliWeb <<simple web framework>>: https://github.com/limodou/uliweb
My Blog: http://my.oschina.net/limodou

[Chunlin Zhang]

我看是直接生成一个uuid, wikipedia里说的是一个HMAC

To view this discussion on the web visit https://groups.google.com/d/msgid/uliweb/CADCtg9-w5W2AwOApT_9ULurRPFMVnQwRBufWW8%2BEwxWjczb_MQ%40mail.gmail.com.

[limodou]

这个有多大的区别?我觉得差不多吧。反正都是不可预测。

To view this discussion on the web visit https://groups.google.com/d/msgid/uliweb/CAG2rzAm0QibED7Ni3sOaDEJwwX1_Xhu1H16tLUJde-zCKEPbBg%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.