[dokuwiki] New PR: Use cryptographically secure pseudo random number generator (CSPRNG)

  • From: "kelunik" <wiki@xxxxxxxxxxxx>
  • To: dokuwiki@xxxxxxxxxxxxx
  • Date: Sun, 20 Nov 2016 19:29:02 +0100 (CET)

Hi,

kelunik opened a new pull request at 
https://github.com/splitbrain/dokuwiki/pull/1761:

Uses `paragonie/random_compat` instead of insecure home-brewed code. It's NEVER 
fine to fall back to `mt_rand()` for secure random. Fixes #1760.

I'd prefer not pushing the complete `vendor` directory, but that's another 
issue.

Please help us to review this pull request, so new contributors get feedback in 
a timely manner.

3520d480-af4f-11e6-8e5f-ed71cd649272


-- 
DokuWiki mailing list - more info at
http://www.dokuwiki.org/mailinglist

Other related posts:

  • » [dokuwiki] New PR: Use cryptographically secure pseudo random number generator (CSPRNG) - kelunik
  1. Home
  2. dokuwiki
  3. Archive
  4. 11-2016