From 229819236d638a3768e16adf808d2a4e6a794dd9 Mon Sep 17 00:00:00 2001
From: Damien Elmes <gpg@ankiweb.net>
Date: Sat, 31 May 2025 16:00:31 +0700
Subject: [PATCH] Use more secure API key

https://github.com/ankitects/anki/pull/3925#discussion_r2051494659
(cherry picked from commit 757247d424ed9b24a0fdd49f959fddbf5d35dde6)
---
 qt/aqt/mediasrv.py | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/qt/aqt/mediasrv.py b/qt/aqt/mediasrv.py
index f086ae515..e360463e4 100644
--- a/qt/aqt/mediasrv.py
+++ b/qt/aqt/mediasrv.py
@@ -7,9 +7,8 @@ import enum
 import logging
 import mimetypes
 import os
-import random
 import re
-import string
+import secrets
 import sys
 import threading
 import traceback
@@ -762,7 +761,7 @@ def legacy_page_data() -> Response:
         return _text_response(HTTPStatus.NOT_FOUND, "page not found")
 
 
-_APIKEY = "".join(random.choices(string.ascii_letters + string.digits, k=32))
+_APIKEY = secrets.token_urlsafe(32)
 
 
 def _have_api_access() -> bool: