CSRF token is generated using math/random not crypto/random #2489
Description
Issue Description
Can someone please explain why labstack/gommon/random is using math/random over crypto/random. This is what is used to generate the CSRF tokens.
All it does is reset the random seed in the New function, but I'm a bit concerned it's not using crypto/random.
That means we can get predictable CSRF tokens, not good.
Checklist
- Dependencies installed
- No typos
- Searched existing issues and docs
Expected behaviour
Actual behaviour
Steps to reproduce
Working code to debug
package main func main() { }