Weak algorithms usage should be avoided

Created on 10 January 2020, over 4 years ago
Updated 26 September 2023, 9 months ago

To avoid false positives weak algorithms should not be used (see https://www.drupal.org/node/845876 โ†’ )

Affected code:

docroot/modules/contrib/purge/modules/purge_ui/src/Plugin/Block/PurgeBlock.php 143
docroot/modules/contrib/purge/src/Plugin/Purge/Purger/PurgersService.php 209

Solution:

use Drupalโ€™s hashBase64 methods:

\Drupal\Component\Utility\Crypt::hashBase64($data)
\Drupal\Component\Utility\Crypt::hmacBase64($data, $key)

in those files affected

๐Ÿ“Œ Task
Status

Closed: won't fix

Version

3.0

Component

Code

Created by

๐Ÿ‡ฎ๐Ÿ‡ณIndia guptahemant

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.69.0 2024