From 092dd8a532067ad719ea432c643536e575b8c5d2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=B6=B5=E6=9B=A6?= <im.hanxi@gmail.com>
Date: Wed, 25 Sep 2024 22:27:08 +0800
Subject: [PATCH] Fix code scanning alert no. 33: Use of a broken or weak
 cryptographic hashing algorithm on sensitive data (#202)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 xiaomusic/xiaomusic.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xiaomusic/xiaomusic.py b/xiaomusic/xiaomusic.py
index 4ea80bf..611cb30 100644
--- a/xiaomusic/xiaomusic.py
+++ b/xiaomusic/xiaomusic.py
@@ -114,7 +114,7 @@ class XiaoMusic:
 
         url_parts = urllib.parse.urlparse(url)
         file_path = urllib.parse.unquote(url_parts.path)
-        correct_code = hashlib.md5(
+        correct_code = hashlib.sha256(
             (
                 file_path
                 + self.config.httpauth_username