Closed Abelkrijgtalles closed 2 years ago
hashlib.sha1 is insecure. Consider changing it to a secure hashing algorithm (e.g. SHA256). res/groove.py Line 46: return rnd +hashlib.sha1('%s:%s:%s:%s' % (method, _token, secret, rnd)).hexdigest()
return rnd +
('%s:%s:%s:%s' % (method, _token, secret, rnd)).hexdigest()
Please, use the same issue opened few minutes ago. Thanks.
hashlib.sha1 is insecure. Consider changing it to a secure hashing algorithm (e.g. SHA256). res/groove.py Line 46:
return rnd +
hashlib.sha1('%s:%s:%s:%s' % (method, _token, secret, rnd)).hexdigest()