Merge pull request #14 from fancycode/secure_random

Secure random

src/app/spreed-speakfreely-server/random.go

@@ -21,7 +21,9 @@
 package main
 
 import (
-	"math/rand"
+	"crypto/rand"
+	"encoding/base64"
+	pseudoRand "math/rand"
 	"time"
 )
 
@@ -32,14 +34,36 @@ const (
 func RandomString(length int) string {
 
 	buf := make([]byte, length)
-	for i := 0; i < length; i++ {
+	_, err := rand.Read(buf)
-		buf[i] = dict[rand.Intn(len(dict)-1)]
+	if err != nil {
+		// fallback to pseudo-random
+		for i := 0; i < length; i++ {
+			buf[i] = dict[pseudoRand.Intn(len(dict))]
+		}
+	} else {
+		for i := 0; i < length; i++ {
+			buf[i] = dict[int(buf[i])%len(dict)]
+		}
 	}
 	return string(buf)
 
 }
 
+func RandomUrlString(length int) string {
+
+	buf := make([]byte, length)
+	_, err := rand.Read(buf)
+	if err != nil {
+		// fallback to pseudo-random
+		for i := 0; i < length; i++ {
+			buf[i] = byte(pseudoRand.Intn(256))
+		}
+	}
+	return base64.URLEncoding.EncodeToString(buf)
+
+}
+
 func init() {
-	// Make sure to seed dsfault random generator.
+	// Make sure to seed default random generator.
-	rand.Seed(time.Now().UTC().UnixNano())
+	pseudoRand.Seed(time.Now().UTC().UnixNano())
 }