Files
codeql/go/ql/test/query-tests/Security/CWE-338/InsecureRandomness/InsecureRandomness.go
2026-06-11 07:15:54 +02:00

16 lines
322 B
Go

package main
import (
"math/rand"
)
var charset = []rune("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
func generatePassword() string {
s := make([]rune, 20)
for i := range s {
s[i] = charset[rand.Intn(len(charset))] // $ Alert // BAD: weak RNG used to generate password
}
return string(s)
}