use secrets package over random package

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

ID: python-security/avoid-random

Language: Python

Severity: Error

Category: Security

CWE: 330

Description

Make sure to use values that are actually random. The random module in Python should generally not be used and replaced with the secrets module, as noted in the official Python documentation.

Learn More

Non-Compliant Code Examples

from random import randrange

randrange(10) # # randrange is not actually random

from random import random

v = random() # random is not actually random

import random

n = random.randrange(10) # randrange is not actually random

import random

n = random.random(1) # randrange is not actually random

import random

n = random.random() # randrange is not actually random

Compliant Code Examples

n = random.random()
PREVIEWING: aliciascott/DOCS-9725-Cloudcraft