From af105e08bc5c2f53c4dc1ba7a0149f885d1584f5 Mon Sep 17 00:00:00 2001 From: richard-dds Date: Fri, 16 Nov 2018 14:02:10 -0500 Subject: [PATCH] Use more secure sha256 --- atst/utils/form_cache.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/atst/utils/form_cache.py b/atst/utils/form_cache.py index 7d359227..d9ac5b24 100644 --- a/atst/utils/form_cache.py +++ b/atst/utils/form_cache.py @@ -1,5 +1,4 @@ -import os -import hashlib +from hashlib import sha256 import pickle @@ -17,7 +16,7 @@ class FormCache(object): def write(self, formdata, expiry_seconds=3600, key_prefix=DEFAULT_CACHE_NAME): value = pickle.dumps(formdata) - hash_ = hashlib.sha1(os.urandom(64)).hexdigest() + hash_ = sha256().hexdigest() self.redis.setex( name=self._key(key_prefix, hash_), value=value, time=expiry_seconds )