Math.random() usage
swetha8612 opened this issue · 3 comments
swetha8612 commented
As part of our company's security policy, we run all our application through fortify scan. Fortify scan raised a flag where Math.random() has been used in this package. It is suggesting to replace with window.crypto.getRandomValues(new Uint32Array(10))[0]. Could you please have a look. Thank you.
EskiMojo14 commented
the only place Math.random is used is to randomise the Redux internal actions, to ensure developers don't try and respond to them specifically. This is not anything that should be of a security concern.
markerikson commented
Also, having prior experience with Fortify, I can vouch that many of its rules are stupid, and this one in particular.
swetha8612 commented
Thank you for confirming.