- Reject secrets shorter than 32 bytes (fall back to generated key) - Use SHA-256 hash instead of naive byte cycling to derive the key (cycling "password" to 64 bytes gave extremely low entropy) |
||
|---|---|---|
| .. | ||
| adminrpc | ||
| app | ||
| git-hook | ||
| gitserver | ||
| migrate | ||
| operator | ||
| static | ||