Skip to content
This repository has been archived by the owner on May 1, 2024. It is now read-only.

Commit

Permalink
Update GravatarImageSourceHandler.android.ios.macos.tizen.uwp.wpf.cs
Browse files Browse the repository at this point in the history
  • Loading branch information
jfversluis committed Dec 9, 2022
1 parent aca2829 commit b55322a
Showing 1 changed file with 4 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -115,11 +115,12 @@ static string DefaultGravatarName(DefaultGravatar defaultGravatar)
_ => $"{defaultGravatar}".ToLower(),
};

// While MD5 is deemed to be not secure anymore, it is not used in a security context here/
// While MD5 is deemed to be not secure anymore, it is not used in a security context here.
// This is used by Gravatar to encode the email address to something they can use.
// Also see: https://en.gravatar.com/site/implement/hash/
// As part as Microsofts ongoing efforts to secure the .NET ecosystem, an exception has been requested
// for the usage of this "unsafe" hashing mechanism. More details here (internal link): https://devdiv.visualstudio.com/DevDiv/_workitems/edit/1680417
// As part as Microsofts ongoing efforts to secure the .NET ecosystem, this usage of an insecure hashing mechanism was flagged.
// An exception has been requested for the usage of this "unsafe" hashing mechanism.
// More details here (internal link): https://devdiv.visualstudio.com/DevDiv/_workitems/edit/1680417
static string GetMd5Hash(string str)
{
using var md5 = MD5.Create();
Expand Down

0 comments on commit b55322a

Please sign in to comment.