Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

[Security] bcrypt is the new default hasher for native/auto#14992

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
OskarStark merged 1 commit intosymfony:5.xfromjaviereguiluz:fix_14980
Feb 17, 2021

Conversation

@javiereguiluz
Copy link
Member

Fixes#14980.

@OskarStark
Copy link
Contributor

Thank you Javier.

@OskarStarkOskarStark merged commita0ceecd intosymfony:5.xFeb 17, 2021
javiereguiluz added a commit that referenced this pull requestJun 11, 2021
…(pableu)This PR was merged into the 5.3 branch.Discussion----------[Security] Update description of password hasher configThe description of the password hashers in the reference isn't up to date for Symfony 5.3."Auto" now always uses bcrypt (see#14980 and#14992), but it  wasn't reflected here. I initially thought this was a bug in the password hasher component itself and created asymfony/symfony#41646, but I've since learned that the switch to bcrypt was intentional :-)I updated all the hasher descriptions a bit and removed the part about sodium before PHP 7.2 because Symfony 5.3 requires PHP >= 7.2. I also added an extra paragraph for the bcrypt hasher because it was a bit mixed into the description of the "auto" hasher.Commits-------d404d19 [Security] update description of password hasher config
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@wouterjwouterjwouterj approved these changes

@OskarStarkOskarStarkOskarStark approved these changes

Assignees

No one assigned

Projects

None yet

Milestone

5.3

Development

Successfully merging this pull request may close these issues.

[PasswordHasher] Use bcrypt as default hash algorithm for "native" and "auto"

4 participants

@javiereguiluz@OskarStark@wouterj@carsonbot

[8]ページ先頭

©2009-2025 Movatter.jp