Giters

tpeczek / Lib.AspNetCore.Security

Lib.AspNetCore.Security is a library which provides security features like Content Security Policy, Strict Transport Security or Expect-CT for ASP.NET Core

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Make nonce-source generation secure

tpeczek opened this issue · comments

commented

The current generation of nonce-source is not secure. From specification:

The generated value SHOULD be at least 128 bits long (before encoding), and SHOULD be generated via a cryptographically secure random number generator in order to ensure that the value is difficult for an attacker to predict.