close reugn#12: use SecureRandom

pariskol · Nov 13, 2019 · 20ac4a0 · 20ac4a0
1 parent f1b9363
commit 20ac4a0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/com/github/reugn/devtools/utils/PasswordGenerator.java b/src/main/java/com/github/reugn/devtools/utils/PasswordGenerator.java
@@ -1,5 +1,6 @@
 package com.github.reugn.devtools.utils;
 
+import java.security.SecureRandom;
 import java.util.Random;
 
 public class PasswordGenerator {
@@ -30,7 +31,7 @@ private PasswordGenerator(PasswordGeneratorBuilder builder) {
     public String generate(int length) {
         if (dictionary.isEmpty()) return "";
         StringBuilder password = new StringBuilder(length);
-        Random random = new Random(System.nanoTime());
+        Random random = new SecureRandom();
         for (int i = 0; i < length; i++) {
             password.append(dictionary.charAt(random.nextInt(dictionary.length())));
         }