search

eclipse-ee4j / grizzly

Grizzly
https://eclipse-ee4j.github.io/grizzly
Other
147 stars 68 forks source link

DefaultSessionManager uses predictable java.util.Random instead of java.security.SecureRandom #2180

Open rlking opened 1 year ago

rlking commented 1 year ago

This popped up during an audit. Is there any reason to not use SecureRandom to generate the session id? Could be easily switched.

mnriem commented 11 months ago

@rlking Can you supply a PR?