id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
14669	Use window.crypto Instead of Math.random	patrick5080		"Hello,
I have a request please. We are using HP Fortify for our code-base and Fortify reports security vulnerabilities in the ckeditor and lite-includes.js (and the jquery.min.js) files. The lite-includes.js and jquery.min.js files are located under the plugins/lite directory. Is it possible to replace Math.random method with window.cyrpto.random method as Fortify specifies this is a security vulnerability?

Thank you,
patrick

== Steps to reproduce ==

1. View contents of ckeditor.js and lite-includes-min.js file (plugins/lite)
2. Code is using Math.random() instead of window.crytpo.random()

== Other details (browser, OS, CKEditor version, installed plugins) ==
"	New Feature	closed	Normal		General	4.5.4	invalid