google-nomulus/java/google/registry/util
nickfelt 0405a427f1 Remove unnecessary SecureRandom from UrlFetchUtils
We're only using it for generating multiparty boundaries, and there's no real need for the random boundary values to be cryptographically secure.  The point of the randomness is just to make collisions with content in the payload sufficiently unlikely.  The app itself controls the payload contents, and while it might be derived from user-submitted content, in practice it would be nearly infeasible to get the payload to contain arbitrary boundary values even if the RNG-produced boundaries could be determined in advance.

To further insulate against this, I've increased the boundary size (from 40 bits to 192) and added an actual check that the boundary isn't present in the input data, so that in the extremely unlikely event of a collision, we fail rather than producing an invalid multipart request.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=142784289
2016-12-22 16:10:44 -05:00
..
AppEngineTimeLimiter.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
BUILD Run buildifier on codebase to format BUILD files 2016-11-28 18:15:21 -05:00
CacheUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
CapturingLogHandler.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
CidrAddressBlock.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
Clock.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
CollectionUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
Concurrent.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
DatastoreServiceUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
DateTimeUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
DiffUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
DomainNameUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
FixedClock.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
FormattingLogger.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
HexDumper.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
Idn.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
ImprovedInputStream.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
ImprovedOutputStream.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
ListNamingUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
NetworkUtils.java Add filter support to the test server 2016-12-13 18:00:15 -05:00
NonFinalForTesting.java Add retry logic to CreateLrpTokensCommand 2016-11-10 11:26:03 -05:00
ObjectifyUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
package-info.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
PipelineUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
PosixTarHeader.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
PreconditionsUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
PredicateUtils.java Use correct <a> tag syntax in javadoc @see tag 2016-11-02 15:19:34 -04:00
RandomStringGenerator.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
RegistrarUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
ResourceUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
Retrier.java Retry RDE report on SocketTimeoutException 2016-11-28 11:31:16 -05:00
SendEmailService.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
SendEmailUtils.java Change all references to Domain Registry to Nomulus 2016-10-14 16:58:07 -04:00
SerializeUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
Sleeper.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
SqlTemplate.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
StringGenerator.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
SystemClock.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
SystemSleeper.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
TaskEnqueuer.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
TeeOutputStream.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
TokenUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
TypeUtils.java Add a custom logic framework to provide pluggable extensibility 2016-11-15 15:19:32 -05:00
UrlFetchException.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
UrlFetchUtils.java Remove unnecessary SecureRandom from UrlFetchUtils 2016-12-22 16:10:44 -05:00
X509Utils.java Revert Guava 20 features until we get the build working properly 2016-11-02 15:19:34 -04:00
XmlEnumUtils.java Preserve test logs and test summary output for Kokoro CI runs 2016-10-14 16:57:43 -04:00
XmlToEnumMapper.java Refactor some RDE import logic to be generic 2016-10-14 17:00:26 -04:00