Merge pull request #9 from athrael-soju/alert-autofix-3

Fix code scanning alert no. 3: Insecure randomness
athrael-soju · Dec 19, 2024 · 2aefa06 · 2aefa06
2 parents 2d8f356 + f4d0971
commit 2aefa06
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/utils.ts b/lib/utils.ts
@@ -43,9 +43,11 @@ export function getLocalStorage(key: string) {
   return [];
 }
 
+import { randomBytes } from 'crypto';
+
 export function generateUUID(): string {
   return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
-    const r = (Math.random() * 16) | 0;
+    const r = randomBytes(1)[0] % 16;
     const v = c === 'x' ? r : (r & 0x3) | 0x8;
     return v.toString(16);
   });