box / box/box-java-sdk

Increase hashing capabilities from SHA1(vulnerable) to SHA256 or higher

Đang mở
#1,041 2 bình luận 0 reaction 4 người được giao Được @mwwoda nhận Xem trên GitHub
enhancement
Ngôn ngữ chính
Java
Star
170
Fork
189
Merge trung bình
20 giờ 26 phút
Pull request đã merge (30 ngày)
22

Mô tả

### Is your feature request related to a problem? Please describe.

It has been made clear by the industry at IBM that SHA1 is suspect in its partial security weaknesses and causes applications that use the box sdk to fail app scan testing as the box sdk is not secure enough and needs safer hashes.
### Describe the solution you'd like

Box needs to add SHA256 and SHA512 compatibility so the sdk can be classified as safe and not cause vulnerabilities for companies such as IBM that use the sdk
### Describe alternatives you've considered

No clear alternative yet as my entire application works on the box sdk
### Additional context

This is a high priority item and should be remedied as soon as possible to make the box sdk secure again

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.