Fix code scanning alert no. 12: Insecure randomness (#1544)

Signed-off-by: Priyankar Pal <[email protected]> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
reactplay · Oct 10, 2024 · d7bfc6d · d7bfc6d
1 parent 22d3eed
commit d7bfc6d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/plays/password-generator/PasswordGenerator.jsx b/src/plays/password-generator/PasswordGenerator.jsx
@@ -23,12 +23,12 @@ function PasswordGenerator(props) {
 
   // generate a random number within limit which is provided
   const randomNumberGenerator = (limit) => {
+    const array = new Uint32Array(1);
     let result = 0;
     while (limit) {
-      result = Math.floor(Math.random() * Math.floor(Math.random() * 100));
+      window.crypto.getRandomValues(array);
+      result = array[0] % limit;
       if (result < limit) return result;
-
-      continue;
     }
   };