Use cryptographically secure random source for password generation
Open
good first issue
help wanted
- Dominant language
- Python
- Stars
- 29
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Issue: [B311:blacklist] Standard pseudo-random generators are not suitable for security/cryptographic purposes.
- Severity: Low
- Confidence: High
- Location: mtls/mtls.py:448
- More Info: https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b311-random
```
447 for c in range(10):
448 pw.append(random.choice(wordList))
449 return " ".join(pw).rstrip()
```
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.