#402 Weak PRNG in tracing.py for trace/span ID generation
Description
Editengine/utils/tracing.py:94,103 uses random.getrandbits() instead of secrets module for trace/span IDs. While not cryptographically sensitive, using weak PRNG could enable trace ID prediction in advanced attack scenarios. Fix: Use secrets.token_hex() instead.
Comments
Loading comments...
Context
Loading context...
Audit History
View AllLoading audit history...