Files
codeql/go/ql/test/query-tests/Security/CWE-338/InsecureRandomness/InsecureRandomness.go
2022-05-20 10:07:19 -07:00

16 lines
311 B
Go

package main
import (
"math/rand"
)
var charset = []rune("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
func generatePassword() string {
s := make([]rune, 20)
for i := range s {
s[i] = charset[rand.Intn(len(charset))] // BAD: weak RNG used to generate password
}
return string(s)
}