Merge remote-tracking branch 'sec_fixes/random_password'

This commit is contained in:
OzzieIsaacs 2020-05-10 10:18:40 +02:00
commit d61b7e48d7
1 changed files with 1 additions and 1 deletions

View File

@ -466,7 +466,7 @@ def reset_password(user_id):
def generate_random_password():
s = "abcdefghijklmnopqrstuvwxyz01234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%&*()?"
passlen = 8
return "".join(random.sample(s, passlen))
return "".join(s[c % len(s)] for c in os.urandom(passlen))
################################## External interface