sheltermanager / asm3

Animal Shelter Manager
GNU General Public License v3.0
109 stars 67 forks source link

reset_password is producing weak passwords #1539

Closed bobintetley closed 2 months ago

bobintetley commented 2 months ago

Reset password uses a value from the animalname file until the user chooses their next password. This is very weak from a security point of view. Generate a random, stronger password instead (eg: use epoch_32 or something else).

Makes sense to do in conjunction with #1538