Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
  • typo3 typo3
  • Project information
    • Project information
    • Activity
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Analytics
    • Analytics
    • CI/CD
    • Insights
    • Repository
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • typo3typo3
  • typo3typo3
  • Repository
Switch branch/tag
  • typo3
  • typo3
  • sysext
  • install
  • Classes
  • Report
  • SecurityStatusReport.php
Find file BlameHistoryPermalink
  • Christian Kuhn's avatar
    [TASK] Refactor SaltFactory · 2087c42a
    Christian Kuhn authored Aug 09, 2018 and Andreas Fernandez's avatar Andreas Fernandez committed Aug 09, 2018
    The patch deprecates static SaltFactory::getSaltingInstance()
    and replaces it with the two new non-static methods.
    The ->get() method returns a hash instance to check a given password
    against a given hash, and ->getDefaultHashInstance() which returns
    an instance of the configured default hash method to calculate
    a hash for a new password.
    
    The new methods are now strict, non-static and throw exceptions if
    something goes wrong. This simplifies mocking in tests and sanitizes
    password hash handling in the core.
    
    Change-Id: I186576593202cb6d052bc7c1ca6f81314eddbaf2
    Resolves: #85796
    Releases: master
    Reviewed-on: https://review.typo3.org/57847
    
    
    Tested-by: default avatarTYPO3com <no-reply@typo3.com>
    Reviewed-by: Markus Klein's avatarMarkus Klein <markus.klein@typo3.org>
    Tested-by: Markus Klein's avatarMarkus Klein <markus.klein@typo3.org>
    Reviewed-by: Andreas Fernandez's avatarAndreas Fernandez <a.fernandez@scripting-base.de>
    Tested-by: Andreas Fernandez's avatarAndreas Fernandez <a.fernandez@scripting-base.de>
    2087c42a