Skip to content

Commit 666eca2

Browse files
Addressed bandit high severity that this is intentional and not a security vulnerability
1 parent d196375 commit 666eca2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docassemble/AssemblyLine/sessions.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1714,7 +1714,7 @@ def update_session_metadata(
17141714

17151715
# 2) Derive two signed 32‑bit ints from MD5(session_id|filename|tags)
17161716
key_string = f"{session_id}|{filename}|{metadata_key_name}"
1717-
digest = hashlib.md5(key_string.encode("utf-8")).digest()
1717+
digest = hashlib.md5(key_string.encode("utf-8"), usedforsecurity=False).digest()
17181718
high_u32, low_u32 = struct.unpack(">II", digest[:8])
17191719

17201720
def to_signed_32(x: int) -> int:

0 commit comments

Comments
 (0)