ws: use crypto getRandomValues (denoland/std#584)

Original: denoland/std@bc7dd39
ry · Sep 4, 2019 · 7213d9c · 7213d9c
1 parent eea856e
commit 7213d9c
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/ws/mod.ts b/ws/mod.ts
@@ -189,11 +189,7 @@ export async function readFrame(buf: BufReader): Promise<WebSocketFrame> {
 
 // Create client-to-server mask, random 32bit number
 function createMask(): Uint8Array {
-  // TODO: use secure and immutable random function. Crypto.getRandomValues()
-  const arr = Array.from({ length: 4 }).map(
-    (): number => Math.round(Math.random() * 0xff)
-  );
-  return new Uint8Array(arr);
+  return crypto.getRandomValues(new Uint8Array(4));
 }
 
 class WebSocketImpl implements WebSocket {