| module: github.com/dinever/golf |
| versions: |
| - fixed: v0.3.0 |
| description: | |
| CSRF tokens are generated using math/rand, which is not a cryptographically secure |
| rander number generation, making predicting their values relatively trivial and |
| allowing an attacker to bypass CSRF protections which relatively few requests. |
| published: 2021-04-14T12:00:00Z |
| credit: "@elithrar" |
| symbols: |
| - randomBytes |
| links: |
| pr: https://github.com/dinever/golf/pull/24 |
| commit: https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f1fe |
| context: |
| - https://github.com/dinever/golf/issues/20 |
