commit dd92376108206a924137979bd6d6788f4d266286
author Joe Bowser <bowserj@apache.org> Tue Oct 14 10:11:09 2014 -0700
committer Prabhjot Singh <prabhjos@amazon.com> Mon Oct 20 10:05:29 2014 +0530
tree 7590a57ef258dc1b47790ddb4e7ceca6a5ef35f4
parent 76044fac1dff57538f78409bc0062e0513449f8b

Replacing Math.random() with something a little more random.

framework/src/org/apache/cordova/CordovaBridge.java

diff --git a/framework/src/org/apache/cordova/CordovaBridge.java b/framework/src/org/apache/cordova/CordovaBridge.java
index 081127d..a6ebebb 100644
--- a/framework/src/org/apache/cordova/CordovaBridge.java
+++ b/framework/src/org/apache/cordova/CordovaBridge.java
@@ -18,6 +18,8 @@
 */
 package org.apache.cordova;
 
+import java.security.SecureRandom;
+
 import org.apache.cordova.PluginManager;
 import org.json.JSONArray;
 import org.json.JSONException;
@@ -107,7 +109,8 @@
 
     /** Called by cordova.js to initialize the bridge. */
     int generateBridgeSecret() {
-        expectedBridgeSecret = (int)(Math.random() * Integer.MAX_VALUE);
+        SecureRandom randGen = new SecureRandom();
+        expectedBridgeSecret = (int)(randGen.nextInt() * Integer.MAX_VALUE);
         return expectedBridgeSecret;
     }