doramart / DoraCMS

DoraCMS是基于Nodejs+eggjs+mongodb编写的一套内容管理系统,结构简单,较目前一些开源的cms,doracms易于拓展,特别适合前端开发工程师做二次开发。
https://www.html-js.cn
MIT License
3.47k stars 1.02k forks source link

Usage of Fixed Key #262

Open tianjk99 opened 9 months ago

tianjk99 commented 9 months ago

Please check if there is any problem with the hard-coded key.

  1. backstage/adminGroup/src/utils/crypto.js, line12

Using fixed keys may reduce encryption security because an attacker can guess or predict them. To enhance security, it is recommended to use randomly generated keys and ensure secure storage and transmission of keys.