5133.bugfix « changelog.d - matrix/thirdparty/synapse.git - Unnamed repository; edit this file 'description' to name the repository.

index : matrix/thirdparty/synapse.git

Unnamed repository; edit this file 'description' to name the repository.

summary refs log tree commit diff

path: root/changelog.d/5133.bugfix

blob: be6474a69276cba8fcee1aab46f94dab75ee3933 (plain) (blame)

Switch to using a cryptographically-secure random number generator for token strings, ensuring they cannot be predicted by an attacker. Thanks to @opnsec for identifying and responsibly disclosing this issue!