Skip to content

mozilla bug 844796 - use node crypto module for randomString#2059

Merged
JohnMcLear merged 1 commit intoether:developfrom
rhelmer:bug844796-session-token-generation
Jan 15, 2014
Merged

mozilla bug 844796 - use node crypto module for randomString#2059
JohnMcLear merged 1 commit intoether:developfrom
rhelmer:bug844796-session-token-generation

Conversation

@rhelmer
Copy link
Copy Markdown
Contributor

@rhelmer rhelmer commented Jan 15, 2014

This makes randomString() cryptographically secure.

I tried to modify the copy of this in src/static/js/pad_utils.js as well, but apparently that is used on the client side and the crypto module is not available there. I need to figure out exactly what this is used for on the client.

@JohnMcLear
Copy link
Copy Markdown
Member

Cheers

JohnMcLear added a commit that referenced this pull request Jan 15, 2014
mozilla bug 844796 - use node crypto module for randomString
@JohnMcLear JohnMcLear merged commit 346c039 into ether:develop Jan 15, 2014
@marcelklehr
Copy link
Copy Markdown
Contributor

Nice. I'd leave the length parameter in, though.. Is there a reason why
you dropped it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants