Fixes #83 Null pointer when using NullConfigurationProvider

Return a default SecureRandom object from getPrng() to avoid null pointers in the code when NullConfigurationProvider is used.
aramrami · Nov 10, 2017 · 4cf285a · 4cf285a
1 parent 9e26fc1
commit 4cf285a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/csrfguard/src/main/java/org/owasp/csrfguard/config/NullConfigurationProvider.java b/csrfguard/src/main/java/org/owasp/csrfguard/config/NullConfigurationProvider.java
@@ -81,7 +81,11 @@ public boolean isTokenPerPagePrecreateEnabled() {
 
 	@Override
 	public SecureRandom getPrng() {
-		return null;
+		try {
+			return SecureRandom.getInstance("SHA1PRNG", "SUN");
+		} catch (Exception e) {
+			throw new RuntimeException(e);
+		}
 	}
 
 	@Override