From 957d461cdf55b453d6f7814f7b72e785eedac086 Mon Sep 17 00:00:00 2001 From: "pixeebot[bot]" <104101892+pixeebot[bot]@users.noreply.github.com> Date: Tue, 7 May 2024 05:09:33 +0000 Subject: [PATCH] Introduced protections against predictable RNG abuse --- quickjs/src/main/java/com/fongmi/quickjs/utils/Connect.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/quickjs/src/main/java/com/fongmi/quickjs/utils/Connect.java b/quickjs/src/main/java/com/fongmi/quickjs/utils/Connect.java index 0c6cbcf45..ee530fb4f 100644 --- a/quickjs/src/main/java/com/fongmi/quickjs/utils/Connect.java +++ b/quickjs/src/main/java/com/fongmi/quickjs/utils/Connect.java @@ -8,6 +8,7 @@ import com.github.catvod.utils.Util; import com.google.common.net.HttpHeaders; import com.whl.quickjs.wrapper.JSObject; import com.whl.quickjs.wrapper.QuickJSContext; +import java.security.SecureRandom; import java.util.List; import java.util.Map; @@ -85,7 +86,7 @@ public class Connect { } private static RequestBody getFormDataBody(Req req) { - String boundary = "--dio-boundary-" + new Random().nextInt(42949) + "" + new Random().nextInt(67296); + String boundary = "--dio-boundary-" + new SecureRandom().nextInt(42949) + "" + new SecureRandom().nextInt(67296); MultipartBody.Builder builder = new MultipartBody.Builder(boundary).setType(MultipartBody.FORM); Map params = Json.toMap(req.getData()); for (String key : params.keySet()) builder.addFormDataPart(key, params.get(key));