Skip to content

Commit

Permalink
reformat
Browse files Browse the repository at this point in the history
  • Loading branch information
mcasimir committed Dec 19, 2023
1 parent a43751c commit 866a097
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion packages/shell-api/src/helpers.ts
Original file line number Diff line number Diff line change
Expand Up @@ -197,7 +197,7 @@ export function processDigestPassword(
}
// NOTE: this code has raised a code scanning alert about the "use of a broken or weak cryptographic algorithm":
// we inherited this code from `mongo`, and we cannot replace MD5 with a different algorithm, since MD5 is part of the SCRAM-SHA-1 protocol,
// and the purpose of `passwordDigestor=client` is to improve the security of SCRAM-SHA-1, allowing the creation of new users
// and the purpose of `passwordDigestor=client` is to improve the security of SCRAM-SHA-1, allowing the creation of new users
// without the need to communicate their password to the server.
const hash = crypto.createHash('md5');
hash.update(`${username}:mongo:${command.pwd}`);
Expand Down

0 comments on commit 866a097

Please sign in to comment.