Paul King created GROOVY-11515:
----------------------------------
Summary: configurable hashing algorithm
Key: GROOVY-11515
URL: https://issues.apache.org/jira/browse/GROOVY-11515
Project: Groovy
Issue Type: Bug
Affects Versions: 4.0.22
Reporter: wellchang
Assignee: Paul King
Fix For: 4.x
通过iast扫描发现groovy中使用了md5来生成缓存键名，路径为groovy.lang.GroovyClassLoader.getSourceCacheKey
建议使用常见的安全的哈希算法，如SHA-256,SHA-384,SHA-512等
Google Translate gives:
Through iast scanning, it was found that md5 is used in groovy to generate the
cache key name, and the path is groovy.lang.GroovyClassLoader.getSourceCacheKey
It is recommended to use common secure hash algorithms, such as SHA-256,
SHA-384, SHA-512, etc.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
