use secure random number generator (#334) (#335)

dart-lang · Apr 4, 2024 · ced3a37 · ced3a37
1 parent 19d82db
commit ced3a37
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 2.4.5
+
+* use secure random number generator for frame masking.
+
 ## 2.4.4
 
 * Require Dart `^3.3`

diff --git a/lib/src/copy/web_socket_impl.dart b/lib/src/copy/web_socket_impl.dart
@@ -25,7 +25,7 @@ import 'web_socket.dart';
 
 const String webSocketGUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';
 
-final _random = Random();
+final _random = Random.secure();
 
 // Matches _WebSocketOpcode.
 class _WebSocketMessageType {

diff --git a/pubspec.yaml b/pubspec.yaml
@@ -1,5 +1,5 @@
 name: web_socket_channel
-version: 2.4.4
+version: 2.4.5
 description: >-
   StreamChannel wrappers for WebSockets. Provides a cross-platform
   WebSocketChannel API, a cross-platform implementation of that API that