보안 강화: 랜덤 문자열 생성 방식 개선 및 비밀번호 입력 필드에 autocomplete 속성 추가

2026-02-27 14:59:27 +09:00
parent 34093f37a7
commit a755aec78f
5 changed files with 16 additions and 9 deletions
@@ -431,8 +431,10 @@
        function generateString(length) {
            let result = '';
            const charactersLength = characters.length;
+            const randomValues = new Uint32Array(length);
+            window.crypto.getRandomValues(randomValues);
            for (let i = 0; i < length; i++) {
-                result += characters.charAt(Math.floor(Math.random() * charactersLength));
+                result += characters.charAt(randomValues[i] % charactersLength);
            }
            return result;
        }
@@ -307,8 +307,10 @@
        function generateString(length) {
            let result = '';
            const charactersLength = characters.length;
+            const randomValues = new Uint32Array(length);
+            window.crypto.getRandomValues(randomValues);
            for (let i = 0; i < length; i++) {
-                result += characters.charAt(Math.floor(Math.random() * charactersLength));
+                result += characters.charAt(randomValues[i] % charactersLength);
            }
            return result;
        }