Fix code scanning alert no. 33: Use of a broken or weak cryptographic hashing algorithm on sensitive data (#202)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2024-09-25 22:27:08 +08:00 · 2024-09-25 22:27:08 +08:00 · 092dd8a532
commit 092dd8a532
parent 2b6619b4da
1 changed files with 1 additions and 1 deletions
--- a/xiaomusic/xiaomusic.py
+++ b/xiaomusic/xiaomusic.py
@ -114,7 +114,7 @@ class XiaoMusic:

        url_parts = urllib.parse.urlparse(url)
        file_path = urllib.parse.unquote(url_parts.path)
-        correct_code = hashlib.md5(
+        correct_code = hashlib.sha256(
            (
                file_path
                + self.config.httpauth_username