Environment

Adobe Analytics

AppMeasurement.js

Question

Does numbers generated by math.random() used to send sensitive data?

Answer

  • The numbers generated by math.random() are not used to mask, send, or receive any sensitive data. Data transferred to Adobe Analytics relies on the security of the underlying HTTP connection. Ensure this is secure by using the "https" endpoints.
  • According to https://www.owasp.org/index.php/Insecure_Randomness, "Insecure randomness errors occur when a function that can produce predictable values is used as a source of randomness in security-sensitive context". These random numbers are not being used in a security-sensitive context.

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy