diff options
| author | Richard van der Hoff <1389908+richvdh@users.noreply.github.com> | 2019-05-03 15:39:30 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-05-03 15:39:30 +0100 |
| commit | 1acfb9e9f0aa6a734b11a14d10b037e69679371d (patch) | |
| tree | 1e087b3c0d194c46300b67face5ef03accb00f21 /changelog.d/5133.bugfix | |
| parent | 0.99.3 (diff) | |
| parent | typo (diff) | |
| download | synapse-1acfb9e9f0aa6a734b11a14d10b037e69679371d.tar.xz | |
Merge pull request #5133 from matrix-org/rav/systemrandom
Use SystemRandom for token generation.
Diffstat (limited to 'changelog.d/5133.bugfix')
| -rw-r--r-- | changelog.d/5133.bugfix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/5133.bugfix b/changelog.d/5133.bugfix new file mode 100644 index 0000000000..be6474a692 --- /dev/null +++ b/changelog.d/5133.bugfix @@ -0,0 +1 @@ +Switch to using a cryptographically-secure random number generator for token strings, ensuring they cannot be predicted by an attacker. Thanks to @opnsec for identifying and responsibly disclosing this issue! |