Contrib.social

Replace false-positive MD5 usage for generating temporary filename hashes

Open on Drupal.org →
Created on 9 January 2024, about 1 year ago
Updated 29 January 2024, about 1 year ago

Problem/Motivation

Automated security scanning tools report on md5 usage. In the case of where it is used in Open Social it's a false positive, but there's some small room for improvement.

Proposed resolution

We can replace the two liner MD5 hashing for the export filename by simply using PHP's uniqid().

📌 Task
Status

Fixed

Version

12.0

Component

Code (back-end)

Created by

🇳🇱Netherlands bramtenhove

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024