From: Benjamin Auder <benjamin.auder@somewhere>
Date: Thu, 8 Feb 2018 18:06:59 +0000 (+0100)
Subject: add an advice for secret string
X-Git-Url: https://git.auder.net/variants/Cwda/vendor/css/current/gitweb.css?a=commitdiff_plain;h=7473a60833d5b269336ae84e5dd0406bed2e6d5b;p=qomet.git

add an advice for secret string
---

diff --git a/config/parameters.js.dist b/config/parameters.js.dist
index 66e0bd1..a035134 100644
--- a/config/parameters.js.dist
+++ b/config/parameters.js.dist
@@ -6,7 +6,7 @@ Parameters.siteURL = "http://localhost";
 // Lifespan of a (login) cookie
 Parameters.cookieExpire = 183*24*3600*1000; //6 months in milliseconds
 
-// Secret string used in monitoring page + review
+// Secret string used in monitoring page + review; avoid special URL chars '?' '&' '='
 Parameters.secret = "ImNotSoSecretChangeMe";
 
 // Characters in a login token, and period of validity (in milliseconds)