use secure random number generator (dart-lang/web_socket_channel#334) (dart-lang/web_socket_channel#335)
diff --git a/pkgs/web_socket_channel/CHANGELOG.md b/pkgs/web_socket_channel/CHANGELOG.md index 3d75aaf..b7f318e 100644 --- a/pkgs/web_socket_channel/CHANGELOG.md +++ b/pkgs/web_socket_channel/CHANGELOG.md
@@ -1,3 +1,7 @@ +## 2.4.5 + +* use secure random number generator for frame masking. + ## 2.4.4 * Require Dart `^3.3`
diff --git a/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart b/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart index 0616caa..cf74bb2 100644 --- a/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart +++ b/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart
@@ -25,7 +25,7 @@ const String webSocketGUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11'; -final _random = Random(); +final _random = Random.secure(); // Matches _WebSocketOpcode. class _WebSocketMessageType {
diff --git a/pkgs/web_socket_channel/pubspec.yaml b/pkgs/web_socket_channel/pubspec.yaml index 99301cb..0e44661 100644 --- a/pkgs/web_socket_channel/pubspec.yaml +++ b/pkgs/web_socket_channel/pubspec.yaml
@@ -1,5 +1,5 @@ name: web_socket_channel -version: 2.4.4 +version: 2.4.5 description: >- StreamChannel wrappers for WebSockets. Provides a cross-platform WebSocketChannel API, a cross-platform implementation of that API that