{"action":"created","issue":{"url":"https://api.github.com/repos/roundcube/roundcubemail/issues/5266","repository_url":"https://api.github.com/repos/roundcube/roundcubemail","labels_url":"https://api.github.com/repos/roundcube/roundcubemail/issues/5266/labels{/name}","comments_url":"https://api.github.com/repos/roundcube/roundcubemail/issues/5266/comments","events_url":"https://api.github.com/repos/roundcube/roundcubemail/issues/5266/events","html_url":"https://github.com/roundcube/roundcubemail/issues/5266","id":156307793,"number":5266,"title":"Don't use insecure RNGs for password salts","user":{"login":"paragonie-scott","id":11591518,"avatar_url":"https://avatars.githubusercontent.com/u/11591518?v=3","gravatar_id":"","url":"https://api.github.com/users/paragonie-scott","html_url":"https://github.com/paragonie-scott","followers_url":"https://api.github.com/users/paragonie-scott/followers","following_url":"https://api.github.com/users/paragonie-scott/following{/other_user}","gists_url":"https://api.github.com/users/paragonie-scott/gists{/gist_id}","starred_url":"https://api.github.com/users/paragonie-scott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paragonie-scott/subscriptions","organizations_url":"https://api.github.com/users/paragonie-scott/orgs","repos_url":"https://api.github.com/users/paragonie-scott/repos","events_url":"https://api.github.com/users/paragonie-scott/events{/privacy}","received_events_url":"https://api.github.com/users/paragonie-scott/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/roundcube/roundcubemail/labels/C:%20Security","name":"C: Security","color":"bfd4f2"},{"url":"https://api.github.com/repos/roundcube/roundcubemail/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/roundcube/roundcubemail/milestones/27","html_url":"https://github.com/roundcube/roundcubemail/milestones/1.3-beta","labels_url":"https://api.github.com/repos/roundcube/roundcubemail/milestones/27/labels","id":1655806,"number":27,"title":"1.3-beta","description":"New features like\r\n\r\n * Mobile/responsive skin\r\n * Central notification system and API\r\n * Collected Addressbook from outgoing messages\r\n * Keyboard shortcuts for common actions\r\n\r\n","creator":{"login":"rcubetrac","id":17438468,"avatar_url":"https://avatars.githubusercontent.com/u/17438468?v=3","gravatar_id":"","url":"https://api.github.com/users/rcubetrac","html_url":"https://github.com/rcubetrac","followers_url":"https://api.github.com/users/rcubetrac/followers","following_url":"https://api.github.com/users/rcubetrac/following{/other_user}","gists_url":"https://api.github.com/users/rcubetrac/gists{/gist_id}","starred_url":"https://api.github.com/users/rcubetrac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcubetrac/subscriptions","organizations_url":"https://api.github.com/users/rcubetrac/orgs","repos_url":"https://api.github.com/users/rcubetrac/repos","events_url":"https://api.github.com/users/rcubetrac/events{/privacy}","received_events_url":"https://api.github.com/users/rcubetrac/received_events","type":"User","site_admin":false},"open_issues":12,"closed_issues":30,"state":"open","created_at":"2016-03-20T12:13:59Z","updated_at":"2016-10-01T06:23:48Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2016-05-23T16:03:35Z","updated_at":"2016-10-01T06:25:11Z","closed_at":null,"body":"https://github.com/roundcube/roundcubemail/blob/ab6fdfa8bc3a441590778b026b52225473424eec/plugins/password/password.php#L657-L673\r\n\r\nRecommendation:\r\n\r\n1. Use [password_compat](https://github.com/ircmaxell/password_compat).\r\n2. Failing that, use [random_compat](https://github.com/paragonie/random_compat) to polyfill `random_int()` from PHP 7 and use that function instead."},"comment":{"url":"https://api.github.com/repos/roundcube/roundcubemail/issues/comments/250895619","html_url":"https://github.com/roundcube/roundcubemail/issues/5266#issuecomment-250895619","issue_url":"https://api.github.com/repos/roundcube/roundcubemail/issues/5266","id":250895619,"user":{"login":"alecpl","id":546788,"avatar_url":"https://avatars.githubusercontent.com/u/546788?v=3","gravatar_id":"","url":"https://api.github.com/users/alecpl","html_url":"https://github.com/alecpl","followers_url":"https://api.github.com/users/alecpl/followers","following_url":"https://api.github.com/users/alecpl/following{/other_user}","gists_url":"https://api.github.com/users/alecpl/gists{/gist_id}","starred_url":"https://api.github.com/users/alecpl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alecpl/subscriptions","organizations_url":"https://api.github.com/users/alecpl/orgs","repos_url":"https://api.github.com/users/alecpl/repos","events_url":"https://api.github.com/users/alecpl/events{/privacy}","received_events_url":"https://api.github.com/users/alecpl/received_events","type":"User","site_admin":false},"created_at":"2016-10-01T06:25:11Z","updated_at":"2016-10-01T06:25:11Z","body":"Done. I only changed security-related code. Other uses of mt_rand() can be left as it is."}}
{"actor":{"display_login":"alecpl"}}