Why Math.random() Will Fail Your Next Security Audit

If you have ever written something like this in a production codebase: const secret = Math.random().toString(36).slice(2); You have shipped a credential that will fail a security audit. Not might fail...