[wp-trac] [WordPress Trac] #35290: Use CSPRNG to generate salt instead of API, if possible.

WordPress Trac noreply at wordpress.org
Mon Mar 7 06:31:21 UTC 2016


#35290: Use CSPRNG to generate salt instead of API, if possible.
------------------------------+-----------------------------
 Reporter:  sarciszewski      |       Owner:  dd32
     Type:  defect (bug)      |      Status:  closed
 Priority:  normal            |   Milestone:  4.5
Component:  Security          |     Version:  trunk
 Severity:  normal            |  Resolution:  fixed
 Keywords:  has-patch commit  |     Focuses:  administration
------------------------------+-----------------------------
Changes (by dd32):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 In [changeset:"36872"]:
 {{{
 #!CommitTicketReference repository="" revision="36872"
 Setup config: Generate the default secret keys & salts from the local
 CSPRNG if available, falling back to the WordPress.org API and a backup
 psuedo random source.

 Props diddledan.
 Fixes #35290
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35290#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list