CSRF token generation is weak

tsoding / kgbotka

Twitch/Discord Chat Bot that works for KGB monkaS

https://twitch.tv/tsoding

MIT License

17 stars 1 forks source link

Open rexim opened 4 years ago

rexim commented 4 years ago

introduced in #230

We are not using cryptographic RNG
The size and method of the generation based literally on nothing (some sort CSRF token generation research is required)