Re: [Proto-Scripty] Math.Random & Eval usage in prototype.js

2014-07-03 Thread Walter Lee Davis
On Jul 3, 2014, at 6:13 AM, Mahendran Pandian wrote: > Hi Team, >we are using prototype.js for past 8 years in our product development, > Recently our organization introduced code scanner(HP Fortify) to verify any > code vulnerable in the product. The scanner identified as > prototype.js&s

[Proto-Scripty] Math.Random & Eval usage in prototype.js

2014-07-03 Thread Mahendran Pandian
Hi Team, we are using prototype.js for past 8 years in our product development, Recently our organization introduced code scanner(HP Fortify) to verify any code vulnerable in the product. The scanner identified as prototype.js& script.aculo.us uses eval and math.rondom, with is insecure. Ca