From 78634330de8474ff0aea030a5efd33df78cfe331 Mon Sep 17 00:00:00 2001 From: Alex Booker Date: Fri, 14 Aug 2015 18:10:56 +0100 Subject: [PATCH] use secure random number generator --- js/passwordGenerator.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/js/passwordGenerator.js b/js/passwordGenerator.js index e25e611f..6615d06f 100644 --- a/js/passwordGenerator.js +++ b/js/passwordGenerator.js @@ -1,6 +1,12 @@ var passwordGenerator = (function() { var generateRandomNum = function (max) { - return Math.floor(Math.random() * max); + var array = new Uint8Array(1); + window.crypto.getRandomValues(array); + var range = max + 1; + var max_range = 256; + if (array[0] >= Math.floor(max_range / range) * range) + return generateRandomNum(max); + return (array[0] % range); }; var generatePassword = function (options) {