[FIX] base: ir_config_parameter increase database.secret entropy
As this key is secret, does not leak half of it through `database.uuid` key (which is public)
This commit is contained in:
@@ -33,7 +33,7 @@ from openerp.tools import misc, config
|
||||
A dictionary holding some configuration parameters to be initialized when the database is created.
|
||||
"""
|
||||
_default_parameters = {
|
||||
"database.secret": lambda: (str(uuid.uuid1()), ['base.group_erp_manager']),
|
||||
"database.secret": lambda: (str(uuid.uuid4()), ['base.group_erp_manager']),
|
||||
"database.uuid": lambda: (str(uuid.uuid1()), []),
|
||||
"database.create_date": lambda: (datetime.datetime.now().strftime(misc.DEFAULT_SERVER_DATETIME_FORMAT), ['base.group_user']),
|
||||
"web.base.url": lambda: ("http://localhost:%s" % config.get('xmlrpc_port'), []),
|
||||
|
||||
Reference in New Issue
Block a user