updating random number generation to use more secure window.crypto class #688
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
RetrospectiveExtension.Frontend/components/__mocks__/mocked_components/mockedFeedbackColumn.tsx
Fixed
Show fixed
Hide fixed
RetrospectiveExtension.Frontend/components/__mocks__/mocked_components/mockedFeedbackColumn.tsx
Fixed
Show fixed
Hide fixed
RetrospectiveExtension.Frontend/components/__mocks__/mocked_components/mockedFeedbackColumn.tsx
Fixed
Show fixed
Hide fixed
RetrospectiveExtension.Frontend/components/__mocks__/mocked_components/mockedFeedbackColumn.tsx
Fixed
Show fixed
Hide fixed
RetrospectiveExtension.Frontend/components/feedbackBoardMetadataForm.tsx
Fixed
Show fixed
Hide fixed
RetrospectiveExtension.Frontend/components/__mocks__/mocked_components/mockedFeedbackColumn.tsx
Fixed
Show fixed
Hide fixed
| @@ -43,7 +44,7 @@ | |||
| createdDate: new Date(), | |||
| createdByProfileImage: 'testProfileImageSource', | |||
| userIdRef: "user-ref-uuid", | |||
| timerSecs: Math.floor(Math.random() * 60), | |||
| timerSecs: window.crypto.getRandomValues(new Uint32Array(1))[0] % 10, | |||
Check failure
Code scanning / CodeQL
Creating biased random numbers from a cryptographically secure source High
| @@ -193,7 +194,7 @@ | |||
| isMainItem: false | |||
| }, | |||
| userIdRef: "user-ref-uuid", | |||
| timerSecs: Math.floor(Math.random() * 60), | |||
| timerSecs: window.crypto.getRandomValues(new Uint32Array(1))[0] % 10, | |||
Check failure
Code scanning / CodeQL
Creating biased random numbers from a cryptographically secure source High
| @@ -219,7 +220,7 @@ | |||
| createdByProfileImage: 'testProfileImageSource', | |||
| groupedItemProps: testGroupedItemPropsTwo, | |||
| userIdRef: "user-ref-uuid", | |||
| timerSecs: Math.floor(Math.random() * 60), | |||
| timerSecs: window.crypto.getRandomValues(new Uint32Array(1))[0] % 10, | |||
Check failure
Code scanning / CodeQL
Creating biased random numbers from a cryptographically secure source High
Signed-off-by: Engin Polat <[email protected]>
| @@ -26,7 +26,8 @@ | |||
| export const testColumnUuidOne = "mocked-column-uuid-one"; | |||
| export const testColumnUuidTwo = "mocked-column-uuid-two"; | |||
| export const testColumnTwoTitle = 'Test Feedback Column Two'; | |||
| export const testUpvotes = Math.floor(Math.random() * 10); | |||
| export const testUpvotes = window.crypto.getRandomValues(new Uint32Array(1))[0] % 10; | |||
Check failure
Code scanning / CodeQL
Creating biased random numbers from a cryptographically secure source High
No description provided.