Weak algorithms usage should be avoided

Created on 10 January 2020, almost 5 years ago
Updated 26 September 2023, about 1 year ago

To avoid false positives weak algorithms should not be used (see https://www.drupal.org/node/845876 )

Affected code:

docroot/modules/contrib/purge/modules/purge_ui/src/Plugin/Block/PurgeBlock.php 143
docroot/modules/contrib/purge/src/Plugin/Purge/Purger/PurgersService.php 209

Solution:

use Drupal’s hashBase64 methods:

\Drupal\Component\Utility\Crypt::hashBase64($data)
\Drupal\Component\Utility\Crypt::hmacBase64($data, $key)

in those files affected

📌 Task
Status

Closed: won't fix

Version

3.0

Component

Code

Created by

🇮🇳India guptahemant

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024