Skip to content

fix: replace Math.random slugs with crypto randomBytes (RL-003) - #16

Merged
Arlikhozhaev merged 1 commit into
mainfrom
fix/phase-0-security
Jul 11, 2026
Merged

fix: replace Math.random slugs with crypto randomBytes (RL-003)#16
Arlikhozhaev merged 1 commit into
mainfrom
fix/phase-0-security

Conversation

@Arlikhozhaev

Copy link
Copy Markdown
Owner
  • Use randomBytes(12).base64url for shareable slugs (~96 bits entropy).
  • Retry session create on shareableSlug collision.
  • Org slug suffixes use
    the same crypto-safe pattern.

@vercel

vercel Bot commented Jul 11, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
review-lens Ready Ready Preview, Comment Jul 11, 2026 8:38pm

@Arlikhozhaev
Arlikhozhaev merged commit 31d95ce into main Jul 11, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant