Fix code scanning alert no. 32: Use of a broken or weak cryptographic hashing algorithm on sensitive data (#203)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2024-09-25 22:26:48 +08:00 · 2024-09-25 22:26:48 +08:00 · 2b6619b4da
commit 2b6619b4da
parent db8b90487f
1 changed files with 1 additions and 1 deletions
--- a/xiaomusic/httpserver.py
+++ b/xiaomusic/httpserver.py
@ -399,7 +399,7 @@ def access_key_verification(file_path, key, code):
    if code is not None:
        current_code_bytes = code.encode("utf8")
        correct_code_bytes = (
-            hashlib.md5(
+            hashlib.sha256(
                (
                    file_path + config.httpauth_username + config.httpauth_password
                ).encode("utf-8")