refactor(rand): enhance random number generation security

- Replace `math/rand` with `crypto/rand` and alias `math/rand` as `mathrand` - Change the random source initialization to use the `mathrand` alias Signed-off-by: appleboy <[email protected]>
appleboy · Oct 25, 2024 · b7159ec · b7159ec
1 parent a4c6f80
commit b7159ec
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/random/random.go b/random/random.go
@@ -1,7 +1,8 @@
 package random
 
 import (
-	"math/rand"
+	"crypto/rand"
+	mathrand "math/rand"
 	"time"
 	"unsafe"
 )
@@ -52,7 +53,7 @@ const (
 	letterIdxMax  = 63 / letterIdxBits   // # of letter indices fitting in 63 bits
 )
 
-var src = rand.NewSource(time.Now().UnixNano())
+var src = mathrand.NewSource(time.Now().UnixNano())
 
 func randStringBytesMaskImprSrcUnsafe(n int) string {
 	b := make([]byte, n)