From b7abe2ee9dbeddda8ce49599698434a52d82339e Mon Sep 17 00:00:00 2001
From: Marco Bonetti <marco@cruncher.ch>
Date: Wed, 18 Dec 2024 09:19:10 +0100
Subject: [PATCH] chore:use secrets.token_urlsafe instead of random.randint
 #238

---
 captcha/views.py | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/captcha/views.py b/captcha/views.py
index 3e0a430..3a63db8 100644
--- a/captcha/views.py
+++ b/captcha/views.py
@@ -1,6 +1,7 @@
 import json
 import os
 import random
+import secrets
 import subprocess
 import tempfile
 from io import BytesIO
@@ -162,9 +163,7 @@ def captcha_audio(request, key):
         else:
             text = ", ".join(list(text))
         path = str(
-            os.path.join(
-                tempfile.gettempdir(), f"{key}_{random.randint(100_000, 999_999)}.wav"
-            )
+            os.path.join(tempfile.gettempdir(), f"{key}_{secrets.token_urlsafe(6)}.wav")
         )
         subprocess.run([settings.CAPTCHA_FLITE_PATH, "-t", text, "-o", path])
 
@@ -186,7 +185,7 @@ def captcha_audio(request, key):
             arbnoisepath = str(
                 os.path.join(
                     tempfile.gettempdir(),
-                    f"{key}_{random.randint(100_000, 999_999)}_noise.wav",
+                    f"{key}_{secrets.token_urlsafe(6)}_noise.wav",
                 )
             )
             subprocess.run(
@@ -206,7 +205,7 @@ def captcha_audio(request, key):
             mergedpath = str(
                 os.path.join(
                     tempfile.gettempdir(),
-                    f"{key}_{random.randint(100_000, 999_999)}_merged.wav",
+                    f"{key}_{secrets.token_urlsafe(6)}_merged.wav",
                 )
             )
             subprocess.run(