Update ntlm.js (#641)

marekzmyslowski · web-flow · commit 39ea394eeff7 · 2025-07-14T17:43:00.000+05:30
Suppression for the MD4 usage - this is a part of NTLM v1 specification
diff --git a/api/opensource/node-http-ntlm/ntlm.js b/api/opensource/node-http-ntlm/ntlm.js
@@ -338,7 +338,7 @@ function binaryArray2bytes(array){
 
 function create_NT_hashed_password_v1(password){
 	var buf = new Buffer(password, 'utf16le');
-	var md4 = crypto.createHash('md4');
+	var md4 = crypto.createHash('md4'); // CodeQL [SM04514] Required by NTLM v1 specification
 	md4.update(buf);
 	return new Buffer(md4.digest());
 }

Original file line number	Diff line number	Diff line change
`@@ -338,7 +338,7 @@ function binaryArray2bytes(array){`
`338`	`338`
`339`	`339`	`function create_NT_hashed_password_v1(password){`
`340`	`340`	`var buf = new Buffer(password, 'utf16le');`
`341`		`- var md4 = crypto.createHash('md4');`
	`341`	`+ var md4 = crypto.createHash('md4'); // CodeQL [SM04514] Required by NTLM v1 specification`
`342`	`342`	`md4.update(buf);`
`343`	`343`	`return new Buffer(md4.digest());`
`344`	`344`	`}`