Refactored code for FIPS compliance support. Added/converted to using a more generic Hash() method instead of directly using MD5.
This commit is contained in:
@@ -494,7 +494,7 @@ namespace Umbraco.Core.Security
|
||||
|
||||
//the stamp cannot be null, so if it is currently null then we'll just return a hash of the password
|
||||
return Task.FromResult(user.SecurityStamp.IsNullOrWhiteSpace()
|
||||
? user.PasswordHash.ToMd5()
|
||||
? user.PasswordHash.GenerateHash()
|
||||
: user.SecurityStamp);
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user