bigbluebutton / bigbluebutton-room-media-connector

GNU General Public License v3.0
5 stars 4 forks source link

Linting: secure pin generation #18

Closed tibroc closed 3 months ago

tibroc commented 5 months ago

Probably not really important in our case, more for documentation purposes:

bandit throws the following warning for the pin generation in

>> Issue: [B311:blacklist] Standard pseudo-random generators are not suitable for security/cryptographic purposes.
   Severity: Low   Confidence: High
   CWE: CWE-330 (https://cwe.mitre.org/data/definitions/330.html)
   More Info: https://bandit.readthedocs.io/en/1.7.8/blacklists/blacklist_calls.html#b311-random
   Location: ./app.py:127:18