Use secure confirmation token generator
Closed this issue · 1 comments
chaoran-chen commented
AccountService.saveAccountConfirmationTokenAndSendEmail()
should use a secure token generator. UUID.randomUUID()
is not secure.
michael-kamel commented
This should do