Skip to content

Commit

Permalink
Update docs/Secure-Coding-Guide-for-Python/CWE-693/CWE-330/README.md
Browse files Browse the repository at this point in the history
Co-authored-by: myteron <myteron@gmail.com>
Signed-off-by: BartyBoi1128 <58297160+BartyBoi1128@users.noreply.github.com>
  • Loading branch information
BartyBoi1128 and myteron authored Dec 11, 2024
1 parent 2eb232f commit 0440cff
Showing 1 changed file with 2 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,8 @@ Python's random module is a standard library module that provides functions to g

Therefore, the random module is unsuitable for applications requiring high security as it does not incorporate cryptographic randomness, which means it is not resistant to reverse engineering. Its limited entropy makes it easier for attackers to deduce the internal state of the generator and predict future outputs.

Instead, for generating random numbers, it is recommended to use a more robust option, like Python's secrets module.
Instead, for generating random numbers, it is recommended to use a more robust option, such as Python's `secrets` module.


## Non-compliant Code Example

Expand Down

0 comments on commit 0440cff

Please sign in to comment.