Mints a secret in Drupal's own encoding.
crypto.getRandomValues rather than Math.random(): this is the value that signs password-reset links, so a predictable one is the same defect as a shared one.
crypto.getRandomValues
Math.random()
Mints a secret in Drupal's own encoding.
crypto.getRandomValuesrather thanMath.random(): this is the value that signs password-reset links, so a predictable one is the same defect as a shared one.