Merge pull request #1821 from UlrichB22/fix-hash

add usedforsecurity False in hash functions

Author: UlrichB22

src/moin/utils/crypto.py

@@ -117,7 +117,7 @@ def cache_key(**kw):
 
     :param kw: keys/values to compute cache key from
     """
-    return hashlib.md5(repr(kw).encode()).hexdigest()
+    return hashlib.md5(repr(kw).encode(), usedforsecurity=False).hexdigest()
 
 
 def hash_hexdigest(content, bufsize=4096):

src/moin/utils/plugins.py

@@ -202,7 +202,7 @@ def _loadPluginModule(cfg):
     cfg._plugin_modules = []
     for pdir in cfg.plugin_dirs:
         assert isinstance(pdir, str)
-        modname = "moin_p_{}".format(hashlib.new("sha1", pdir.encode()).hexdigest())
+        modname = "moin_p_{}".format(hashlib.new("sha1", pdir.encode(), usedforsecurity=False).hexdigest())
         if modname not in sys.modules:
             init_path = os.path.join(os.path.abspath(pdir), "__init__.py")
             spec = importlib.util.spec_from_file_location(modname, init_path)