Merge pull request #4568 from JaysonHurst/fips

fix: Removed offending MD5 crypto hash and replaced with SHA1 and SHA256 …
This commit is contained in:
Nick O'Leary 2024-02-26 17:00:26 +00:00 committed by GitHub
commit 6a0f45140c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 3 deletions

View File

@ -99,7 +99,7 @@ module.exports = {
// settings.instanceId is set asynchronously to the editor-api // settings.instanceId is set asynchronously to the editor-api
// being initiaised. So we defer calculating the cacheBuster hash // being initiaised. So we defer calculating the cacheBuster hash
// until the first load of the editor // until the first load of the editor
cacheBuster = crypto.createHash('md5').update(`${settings.version || 'version'}-${settings.instanceId || 'instanceId'}`).digest("hex").substring(0,12) cacheBuster = crypto.createHash('sha1').update(`${settings.version || 'version'}-${settings.instanceId || 'instanceId'}`).digest("hex").substring(0,12)
} }
let sessionMessages; let sessionMessages;

View File

@ -77,7 +77,7 @@ var storageModuleInterface = {
flows: flows, flows: flows,
credentials: creds credentials: creds
}; };
result.rev = crypto.createHash('md5').update(JSON.stringify(result.flows)).digest("hex"); result.rev = crypto.createHash('sha256').update(JSON.stringify(result.flows)).digest("hex");
return result; return result;
}) })
}); });
@ -95,7 +95,7 @@ var storageModuleInterface = {
return credentialSavePromise.then(function() { return credentialSavePromise.then(function() {
return storageModule.saveFlows(flows, user).then(function() { return storageModule.saveFlows(flows, user).then(function() {
return crypto.createHash('md5').update(JSON.stringify(config.flows)).digest("hex"); return crypto.createHash('sha256').update(JSON.stringify(config.flows)).digest("hex");
}) })
}); });
}, },