Contrib.social

Remove the use of `rand`

Open on Drupal.org →
Created on 29 February 2024, over 1 year ago
Updated 18 April 2024, over 1 year ago

Problem/Motivation

The WebformSubmissionConditionsValidator uses rand to generate a random value to make sure users can't determine an element's value/result. PHP advises not to use randfor purposes that require returned values to be unguessable https://www.php.net/manual/en/function.rand.php. Instead use random_int because it is "more secure".

Proposed resolution

Replace rand() with random_int(0, mt_getrandmax())

📌 Task
Status

Fixed

Version

6.2

Component

Code

Created by

bbeversdorf

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024