Daily security quiz #8

Question for 2026-11-08. Read the code and pick the most serious security vulnerability.

This function generates a token to include in a password reset link. What is the most serious vulnerability?

1import random, string
2 
3def make_reset_token(length=32):
4    chars = string.ascii_letters + string.digits
5    return "".join(random.choice(chars) for _ in range(length))

1. AA token length of 32 is too long
2. BThe token is easy to guess because it contains no special characters
3. CThe token does not contain an expiry time
4. DThe random module generates predictable random numbers, so tokens can be guessed