Skip to content

nonce generator on line 96 of the "GenerateWsseHeaderCommand.php" file, not secure #978

Open
@mazaheriaan

Description

@mazaheriaan

On the line 96 of the "GenerateWsseHeaderCommand.php" file ,nonce generator does not guarantee 100% uniqueness of return value, and maybe create duplicate nonce.
It's better to use random_int(),random_bytes(), or openssl_random_pseudo_bytes() instead.

https://www.php.net/manual/en/function.uniqid.php

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions