Refactor: heavy dip refactor #35

2024-04-28T16:12:32Z

Valbou commented

2024-04-28 16:12:32 +00:00

(Migrated from github.com)

#34

github-advanced-security[bot] (Migrated from github.com) reviewed

2024-05-02 18:50:23 +00:00

tests/users/persitence/sqlalchemy/adapters/test_token.py

					
				@ -20,3 +20,3 @@

				            last_name=self.fake.last_name(),

				            email=self.generate_email(),

				            hash_password=self.fake.password(),

				            hash_password=self.generate_password(),

Use of a broken or weak cryptographic hashing algorithm on sensitive data

Sensitive data (password) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.

Show more details

## Use of a broken or weak cryptographic hashing algorithm on sensitive data [Sensitive data (password)](1) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function. [Show more details](https://github.com/Valbou/vtaskr-backend/security/code-scanning/9)

github-advanced-security[bot] (Migrated from github.com) reviewed

2024-05-05 12:16:40 +00:00

tests/users/persitence/sqlalchemy/adapters/test_token.py

					
				@ -39,3 +43,4 @@

				            session.commit()

				            token = self.token_db.load(session, self.token.id)

				            self.assertNotEqual(old_sha_token, token.sha_token)

Use of a broken or weak cryptographic hashing algorithm on sensitive data

Sensitive data (password) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.

Show more details

## Use of a broken or weak cryptographic hashing algorithm on sensitive data [Sensitive data (password)](1) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function. [Sensitive data (password)](2) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function. [Show more details](https://github.com/Valbou/vtaskr-backend/security/code-scanning/10)

Sign in to join this conversation.

No reviewers