ensure Rack::Protection::Base#random_string always outputs 32 characters

lib/rack/protection/base.rb

@@ -99,7 +99,7 @@ def origin(env)
       end
 
       def random_string(secure = defined? SecureRandom)
-        secure ? SecureRandom.hex(32) : "%032x" % rand(2**128-1)
+        secure ? SecureRandom.hex(16) : "%032x" % rand(2**128-1)
       rescue NotImplementedError
         random_string false
       end

spec/base_spec.rb

@@ -0,0 +1,9 @@
+require File.expand_path('../spec_helper.rb', __FILE__)
+
+describe Rack::Protection::Base do
+  describe "#random_string" do
+    it "outputs a string of 32 characters" do
+      described_class.new(lambda {}).random_string.length.should == 32
+    end
+  end
+end