[wp-trac] [WordPress Trac] #35290: Use CSPRNG to generate salt instead of API, if possible.
WordPress Trac
noreply at wordpress.org
Mon Mar 7 06:31:21 UTC 2016
#35290: Use CSPRNG to generate salt instead of API, if possible.
------------------------------+-----------------------------
Reporter: sarciszewski | Owner: dd32
Type: defect (bug) | Status: closed
Priority: normal | Milestone: 4.5
Component: Security | Version: trunk
Severity: normal | Resolution: fixed
Keywords: has-patch commit | Focuses: administration
------------------------------+-----------------------------
Changes (by dd32):
* status: accepted => closed
* resolution: => fixed
Comment:
In [changeset:"36872"]:
{{{
#!CommitTicketReference repository="" revision="36872"
Setup config: Generate the default secret keys & salts from the local
CSPRNG if available, falling back to the WordPress.org API and a backup
psuedo random source.
Props diddledan.
Fixes #35290
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/35290#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list