Merge remote-tracking branch 'sec_fixes/random_password'

5 years ago · d61b7e48d7
parent f590b24f85 2a1bf2fa71
commit d61b7e48d7
1 changed files with 1 additions and 1 deletions
--- a/cps/helper.py
+++ b/cps/helper.py
@ -466,7 +466,7 @@ def reset_password(user_id):
 def generate_random_password():
    s = "abcdefghijklmnopqrstuvwxyz01234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%&*()?"
    passlen = 8
-    return "".join(random.sample(s, passlen))
+    return "".join(s[c % len(s)] for c in os.urandom(passlen))

 ################################## External interface