| module: github.com/dinever/golf | |
| versions: | |
| - fixed: v0.3.0 | |
| description: | | |
| CSRF tokens are generated using math/rand, which is not a cryptographically secure | |
| rander number generation, making predicting their values relatively trivial and | |
| allowing an attacker to bypass CSRF protections which relatively few requests. | |
| published: 2021-04-14T12:00:00Z | |
| credit: "@elithrar" | |
| symbols: | |
| - randomBytes | |
| links: | |
| pr: https://github.com/dinever/golf/pull/24 | |
| commit: https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f1fe | |
| context: | |
| - https://github.com/dinever/golf/issues/20 |