From a755aec78f81aa8e9d80184c96d28abcca5ecae6 Mon Sep 17 00:00:00 2001
From: Rinjae <dearmai@dearmai.net>
Date: Fri, 27 Feb 2026 14:59:27 +0900
Subject: [PATCH] =?UTF-8?q?=EB=B3=B4=EC=95=88=20=EA=B0=95=ED=99=94:=20?=
 =?UTF-8?q?=EB=9E=9C=EB=8D=A4=20=EB=AC=B8=EC=9E=90=EC=97=B4=20=EC=83=9D?=
 =?UTF-8?q?=EC=84=B1=20=EB=B0=A9=EC=8B=9D=20=EA=B0=9C=EC=84=A0=20=EB=B0=8F?=
 =?UTF-8?q?=20=EB=B9=84=EB=B0=80=EB=B2=88=ED=98=B8=20=EC=9E=85=EB=A0=A5=20?=
 =?UTF-8?q?=ED=95=84=EB=93=9C=EC=97=90=20autocomplete=20=EC=86=8D=EC=84=B1?=
 =?UTF-8?q?=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 WebContent/jsp/common/dbconsole/dbConsoleMan.jsp          | 4 ++--
 WebContent/jsp/common/screen/emergency.jsp                | 8 ++++----
 WebContent/jsp/onl/admin/authserver/clientManDetail.jsp   | 4 +++-
 .../onl/apim/approval/credential/credentialManDetail.jsp  | 4 +++-
 .../eai/rms/onl/apim/approval/RandomStringGenerator.java  | 5 ++++-
 5 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/WebContent/jsp/common/dbconsole/dbConsoleMan.jsp b/WebContent/jsp/common/dbconsole/dbConsoleMan.jsp
index 16c925f..94ecf4d 100644
--- a/WebContent/jsp/common/dbconsole/dbConsoleMan.jsp
+++ b/WebContent/jsp/common/dbconsole/dbConsoleMan.jsp
@@ -80,7 +80,7 @@
                         <div id="direct-input-area" class="toolbar-group" style="display:none;">
                             <input type="text" id="direct-jdbc-url" class="form-control form-control-sm" placeholder="JDBC URL" style="width:250px;">
                             <input type="text" id="direct-username" class="form-control form-control-sm" placeholder="Username" style="width:100px;">
-                            <input type="password" id="direct-password" class="form-control form-control-sm" placeholder="Password" style="width:100px;">
+                            <input type="password" id="direct-password" class="form-control form-control-sm" placeholder="Password" autocomplete="off" style="width:100px;">
                         </div>
 
                         <div class="toolbar-divider"></div>
@@ -198,7 +198,7 @@
                 </div>
                 <div class="modal-body">
                     <p class="small text-muted">변경사항을 커밋하려면 비밀번호를 입력하세요.</p>
-                    <input type="password" id="commit-password" class="form-control" placeholder="비밀번호">
+                    <input type="password" id="commit-password" class="form-control" placeholder="비밀번호" autocomplete="off">
                 </div>
                 <div class="modal-footer">
                     <button type="button" class="btn btn-secondary btn-sm" data-bs-dismiss="modal">취소</button>
diff --git a/WebContent/jsp/common/screen/emergency.jsp b/WebContent/jsp/common/screen/emergency.jsp
index 1163a97..b0d1252 100644
--- a/WebContent/jsp/common/screen/emergency.jsp
+++ b/WebContent/jsp/common/screen/emergency.jsp
@@ -332,7 +332,7 @@
 						<input type="text" name="userId" class="form-control rounded-left" placeholder="Id" required>
 					</div>
 					<div class="form-group d-flex">
-						<input type="password" name="password" class="form-control rounded-left" placeholder="Password" required>
+						<input type="password" name="password" class="form-control rounded-left" placeholder="Password" autocomplete="off" required>
 					</div>
 					<div class="form-group">
 						<select  name="serviceType" class="form-control rounded-left" placeholder="system" required>
@@ -382,14 +382,14 @@
 						<input type="text" name="resetUserId" class="form-control rounded-left" placeholder="User Id" required>
 					</div>
 					<div class="form-group d-flex">
-						<input type="password" name="resetPassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderCurrentPassword") %>" required>
+						<input type="password" name="resetPassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderCurrentPassword") %>" autocomplete="off" required>
 					</div>
 					<p><%= localeMessage.getString("login.toChangePasswordMessage") %></p>
 					<div class="form-group d-flex">
-						<input type="password" name="changePassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderChangePassword") %>" required>
+						<input type="password" name="changePassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderChangePassword") %>" autocomplete="off" required>
 					</div>
 					<div class="form-group d-flex">
-						<input type="password" name="confirmPassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderConfirmationPassword") %>" required>
+						<input type="password" name="confirmPassword" class="form-control rounded-left" placeholder="<%= localeMessage.getString("login.placeholderConfirmationPassword") %>" autocomplete="off" required>
 					</div>
 				</div>
 				<div class="modal-footer">
diff --git a/WebContent/jsp/onl/admin/authserver/clientManDetail.jsp b/WebContent/jsp/onl/admin/authserver/clientManDetail.jsp
index 2ba2541..8a89aaf 100644
--- a/WebContent/jsp/onl/admin/authserver/clientManDetail.jsp
+++ b/WebContent/jsp/onl/admin/authserver/clientManDetail.jsp
@@ -431,8 +431,10 @@
         function generateString(length) {
             let result = '';
             const charactersLength = characters.length;
+            const randomValues = new Uint32Array(length);
+            window.crypto.getRandomValues(randomValues);
             for (let i = 0; i < length; i++) {
-                result += characters.charAt(Math.floor(Math.random() * charactersLength));
+                result += characters.charAt(randomValues[i] % charactersLength);
             }
             return result;
         }
diff --git a/WebContent/jsp/onl/apim/approval/credential/credentialManDetail.jsp b/WebContent/jsp/onl/apim/approval/credential/credentialManDetail.jsp
index 335c708..3e54a20 100644
--- a/WebContent/jsp/onl/apim/approval/credential/credentialManDetail.jsp
+++ b/WebContent/jsp/onl/apim/approval/credential/credentialManDetail.jsp
@@ -307,8 +307,10 @@
         function generateString(length) {
             let result = '';
             const charactersLength = characters.length;
+            const randomValues = new Uint32Array(length);
+            window.crypto.getRandomValues(randomValues);
             for (let i = 0; i < length; i++) {
-                result += characters.charAt(Math.floor(Math.random() * charactersLength));
+                result += characters.charAt(randomValues[i] % charactersLength);
             }
             return result;
         }
diff --git a/src/main/java/com/eactive/eai/rms/onl/apim/approval/RandomStringGenerator.java b/src/main/java/com/eactive/eai/rms/onl/apim/approval/RandomStringGenerator.java
index 20a880f..fa0d5bc 100644
--- a/src/main/java/com/eactive/eai/rms/onl/apim/approval/RandomStringGenerator.java
+++ b/src/main/java/com/eactive/eai/rms/onl/apim/approval/RandomStringGenerator.java
@@ -1,14 +1,17 @@
 package com.eactive.eai.rms.onl.apim.approval;
 
+import java.security.SecureRandom;
+
 public class RandomStringGenerator {
     private static final String CHARACTERS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+    private static final SecureRandom SECURE_RANDOM = new SecureRandom();
 
     public static String generateString(int length) {
         StringBuilder result = new StringBuilder(length);
         int charactersLength = CHARACTERS.length();
 
         for (int i = 0; i < length; i++) {
-            int randomIndex = (int) (Math.random() * charactersLength);
+            int randomIndex = SECURE_RANDOM.nextInt(charactersLength);
             result.append(CHARACTERS.charAt(randomIndex));
         }