From 6ce613c15ae1f6c206fb21ebdd924d9dbee0859c Mon Sep 17 00:00:00 2001
From: Code002Lover Arch Laptop <security@ipost.rocks>
Date: Tue, 7 Mar 2023 12:41:13 +0100
Subject: [PATCH] remove any `/` from auth codes

---
 routes/authorize.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/routes/authorize.js b/routes/authorize.js
index fa5e769..12a9172 100644
--- a/routes/authorize.js
+++ b/routes/authorize.js
@@ -23,7 +23,7 @@ export const setup = function (router, con, server) {
                 
                 let tokencode;
                 while(tokencode===undefined || temp_code_to_token[tokencode]!==undefined) {
-                    tokencode = randomBytes(15).toString("base64")
+                    tokencode = randomBytes(15).toString("base64").replace("/\//g","f") //"/" may break some apps
                 }
                 temp_code_to_token[tokencode]={
                     "userid":res.locals.userid,