- removed jsminify patch, and thus requirement for custom tarball - fixes XSS and CSRF security problems. bz 589290 589292
14 lines
655 B
Diff
14 lines
655 B
Diff
--- includes/DataUtil.class.php.orig 2009-12-06 00:50:32.903788349 -0500
|
|
+++ includes/DataUtil.class.php 2009-12-06 00:51:11.467520804 -0500
|
|
@@ -441,9 +441,9 @@
|
|
return bin2hex(mhash(MHASH_SHA256, $string));
|
|
} else {
|
|
if (!class_exists('SHA256')) {
|
|
- Loader::requireOnce('includes/classes/hashes/sha256.class.php');
|
|
+# Loader::requireOnce('includes/classes/hashes/sha256.class.php');
|
|
}
|
|
- return SHA256::hash($string);
|
|
+ return hash('sha256', $string);
|
|
}
|
|
} else if ($type == 'md5') {
|
|
return md5($string);
|