hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

` change to <code>

Browse Source 
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
This commit is contained in:
Maiky
2024-01-27 14:08:55 +01:00
committed by GitHub
parent d7314a1689
commit c2c4d9e4d1
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ruby/ql/src/experimental/insecure-randomness/InsecureRandomness.qhelp
View File

@@ -24,9 +24,9 @@ perform actions that would otherwise be beyond their reach. For instance, if an
predict a newly generated user's random password, they would gain unauthorized access to that user's
account.
For Ruby, `SecureRandom` provides a cryptographically secure pseudo-random number generator.
`rand` is not cryptographically secure, and should be avoided in security contexts.
For contexts which are not security sensitive, Random may be preferable as it has a more convenient
For Ruby, <code>SecureRandom</code> provides a cryptographically secure pseudo-random number generator.
<code>rand</code> is not cryptographically secure, and should be avoided in security contexts.
For contexts which are not security sensitive, <code>Random</code> may be preferable as it has a more convenient
interface.
</p>
@@ -37,11 +37,11 @@ interface.
The following examples show different ways of generating a password.
</p>
<p>The first example uses `Random.rand()` which is not for security purposes</p>
<p>The first example uses <code>Random.rand()</code> which is not for security purposes</p>
<sample src="examples/InsecureRandomnessBad.rb" />
<p>In the second example, the password is generated using `SecureRandom.random_bytes` which is a
<p>In the second example, the password is generated using <code>SecureRandom.random_bytes()</code> which is a
cryptographically secure method.</p>
<sample src="examples/InsecureRandomnessGood.rb" />