diff --git a/CHANGES.md b/CHANGES.md index 66a15743..8db51bf1 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -5,6 +5,7 @@ - [pull #590] Fix underscores within bold text getting emphasized (#589) - [pull #591] Add Alerts extra - [pull #595] Fix img alt text being processed as markdown (#594) +- [pull #600] Use urandom for SECRET_SALT - [pull #602] Fix XSS issue in safe mode (#601) - [pull #604] Fix XSS injection in image URLs (#603) diff --git a/CONTRIBUTORS.txt b/CONTRIBUTORS.txt index 940b866b..010f41f0 100644 --- a/CONTRIBUTORS.txt +++ b/CONTRIBUTORS.txt @@ -60,3 +60,4 @@ Kishore (github.com/jk6521) Ircama (github.com/Ircama) Ankit Mahato (github.com/animator) Eric Dufresne (github.com/edufresne) +Lyra Rebane (github.com/rebane2001) diff --git a/lib/markdown2.py b/lib/markdown2.py index e1fe712c..2473dd01 100755 --- a/lib/markdown2.py +++ b/lib/markdown2.py @@ -119,7 +119,7 @@ from abc import ABC, abstractmethod import functools from hashlib import sha256 -from random import randint, random +from random import random from typing import Any, Callable, Collection, Dict, List, Literal, Optional, Tuple, Type, TypedDict, Union from enum import IntEnum, auto from os import urandom