Closed priyankarpal closed 1 month ago
Name | Link |
---|---|
Latest commit | eeaa238885e738cb9cfe874507407a49883b3bb0 |
Latest deploy log | https://app.netlify.com/sites/reactplayio/deploys/6707e1850af6f800088f0fc7 |
Deploy Preview | https://deploy-preview-1544--reactplayio.netlify.app |
Preview on mobile | Toggle QR Code...Use your smartphone camera to open QR code link. |
To edit notification comments on pull requests, go to your Netlify site configuration.
Fixes https://github.com/reactplay/react-play/security/code-scanning/12
To fix the problem, we need to replace the use of
Math.random()
with a cryptographically secure random number generator. In a browser environment,window.crypto.getRandomValues
is the appropriate choice. This method generates cryptographically secure random values, making it much harder for an attacker to predict the generated passwords.randomNumberGenerator
function to usewindow.crypto.getRandomValues
instead ofMath.random()
.Suggested fixes powered by Copilot Autofix. Review carefully before merging.