Uploaded image for project: 'Python Driver'
  1. Python Driver
  2. PYTHON-3000

Investigate using secure random to avoid false positives for non-crypto related code

XMLWordPrintableJSON

    • Type: Icon: Task Task
    • Resolution: Unresolved
    • Priority: Icon: Unknown Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None

      We occasionally get reports of security problems from naive security scanners about using weak hash functions (md5) or pseudo random number generators (anything in the stdlib random module), even though the code in question has nothing to do with security or cryptography. Investigate using secure random (SystemRandom) and functions in the secrets module to avoid false positives for non-crypto related code.

            Assignee:
            Unassigned Unassigned
            Reporter:
            shane.harvey@mongodb.com Shane Harvey
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: