[34078525] Use system random to generate passwords

2012-08-31 06:29:07 -04:00
parent 87967b9eb8
commit 27fe80d57c
1 changed files with 2 additions and 1 deletions
--- a/common/djangoapps/external_auth/views.py
+++ b/common/djangoapps/external_auth/views.py
@@ -66,7 +66,8 @@ def default_render_failure(request,

 def generate_password(length=12, chars=string.letters + string.digits):
    """Generate internal password for externally authenticated user"""
-    return ''.join([random.choice(chars) for i in range(length)])
+    choice = random.SystemRandom().choice
+    return ''.join([choice(chars) for i in range(length)])


@csrf_exempt