feat(core): Use WebCrypto to generate all random numbers and strings (#9786)

packages/workflow/src/Constants.ts

@@ -1,5 +1,10 @@
 import type { NodeParameterValue } from './Interfaces';
 
+export const DIGITS = '0123456789';
+export const UPPERCASE_LETTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+export const LOWERCASE_LETTERS = UPPERCASE_LETTERS.toLowerCase();
+export const ALPHABET = [DIGITS, UPPERCASE_LETTERS, LOWERCASE_LETTERS].join('');
+
 export const BINARY_ENCODING = 'base64';
 export const WAIT_TIME_UNLIMITED = '3000-01-01T00:00:00.000Z';
 

packages/workflow/src/Cron.ts

@@ -1,3 +1,5 @@
+import { randomInt } from './utils';
+
 interface BaseTriggerTime<T extends string> {
 	mode: T;
 }
@@ -47,7 +49,7 @@ export type TriggerTime =
 	| EveryWeek
 	| EveryMonth;
 
-const randomSecond = () => Math.floor(Math.random() * 60).toString();
+const randomSecond = () => randomInt(60).toString();
 
 export const toCronExpression = (item: TriggerTime): CronExpression => {
 	if (item.mode === 'everyMinute') return `${randomSecond()} * * * * *`;

packages/workflow/src/Extensions/ArrayExtensions.ts

@@ -1,9 +1,11 @@
+import deepEqual from 'deep-equal';
+import uniqWith from 'lodash/uniqWith';
+
 import { ExpressionError } from '../errors/expression.error';
 import { ExpressionExtensionError } from '../errors/expression-extension.error';
 import type { Extension, ExtensionMap } from './Extensions';
 import { compact as oCompact } from './ObjectExtensions';
-import deepEqual from 'deep-equal';
-import uniqWith from 'lodash/uniqWith';
+import { randomInt } from '../utils';
 
 function first(value: unknown[]): unknown {
 	return value[0];
@@ -49,7 +51,7 @@ function pluck(value: unknown[], extraArgs: unknown[]): unknown[] {
 
 function randomItem(value: unknown[]): unknown {
 	const len = value === undefined ? 0 : value.length;
-	return len ? value[Math.floor(Math.random() * len)] : undefined;
+	return len ? value[randomInt(len)] : undefined;
 }
 
 function unique(value: unknown[], extraArgs: string[]): unknown[] {

packages/workflow/src/errors/abstract/node.error.ts

@@ -1,5 +1,5 @@
 import { isTraversableObject } from '../../utils';
-import type { IDataObject, INode, JsonObject } from '../..';
+import type { IDataObject, INode, JsonObject } from '@/Interfaces';
 import { ExecutionBaseError } from './execution-base.error';
 
 /**

packages/workflow/src/errors/node-operation.error.ts

@@ -1,4 +1,4 @@
-import type { INode, JsonObject } from '..';
+import type { INode, JsonObject } from '@/Interfaces';
 import type { NodeOperationErrorOptions } from './node-api.error';
 import { NodeError } from './abstract/node.error';
 

packages/workflow/src/errors/workflow-operation.error.ts

@@ -1,4 +1,4 @@
-import type { INode } from '..';
+import type { INode } from '@/Interfaces';
 import { ExecutionBaseError } from './abstract/execution-base.error';
 
 /**

packages/workflow/src/index.ts

@@ -34,6 +34,8 @@ export {
 	assert,
 	removeCircularRefs,
 	updateDisplayOptions,
+	randomInt,
+	randomString,
 } from './utils';
 export {
 	isINodeProperties,

packages/workflow/src/utils.ts

@@ -1,9 +1,10 @@
 import FormData from 'form-data';
+import { merge } from 'lodash';
+
+import { ALPHABET } from './Constants';
 import type { BinaryFileType, IDisplayOptions, INodeProperties, JsonObject } from './Interfaces';
 import { ApplicationError } from './errors/application.error';
 
-import { merge } from 'lodash';
-
 const readStreamClasses = new Set(['ReadStream', 'Readable', 'ReadableStream']);
 
 // NOTE: BigInt.prototype.toJSON is not available, which causes JSON.stringify to throw an error
@@ -179,3 +180,36 @@ export function updateDisplayOptions(
 		};
 	});
 }
+
+export function randomInt(max: number): number;
+export function randomInt(min: number, max: number): number;
+/**
+ * Generates a random integer within a specified range.
+ *
+ * @param {number} min - The lower bound of the range. If `max` is not provided, this value is used as the upper bound and the lower bound is set to 0.
+ * @param {number} [max] - The upper bound of the range, not inclusive.
+ * @returns {number} A random integer within the specified range.
+ */
+export function randomInt(min: number, max?: number): number {
+	if (max === undefined) {
+		max = min;
+		min = 0;
+	}
+	return min + (crypto.getRandomValues(new Uint32Array(1))[0] % (max - min));
+}
+
+export function randomString(length: number): string;
+export function randomString(minLength: number, maxLength: number): string;
+/**
+ * Generates a random alphanumeric string of a specified length, or within a range of lengths.
+ *
+ * @param {number} minLength - If `maxLength` is not provided, this is the length of the string to generate. Otherwise, this is the lower bound of the range of possible lengths.
+ * @param {number} [maxLength] - The upper bound of the range of possible lengths. If provided, the actual length of the string will be a random number between `minLength` and `maxLength`, inclusive.
+ * @returns {string} A random alphanumeric string of the specified length or within the specified range of lengths.
+ */
+export function randomString(minLength: number, maxLength?: number): string {
+	const length = maxLength === undefined ? minLength : randomInt(minLength, maxLength + 1);
+	return [...crypto.getRandomValues(new Uint32Array(length))]
+		.map((byte) => ALPHABET[byte % ALPHABET.length])
+		.join('');
+}