diff options
| -rw-r--r-- | bottle.py | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -2597,7 +2597,7 @@ def _lscmp(a, b): def cookie_encode(data, key): ''' Encode and sign a pickle-able object. Return a (byte) string ''' msg = base64.b64encode(pickle.dumps(data, -1)) - sig = base64.b64encode(hmac.new(tob(key), msg).digest()) + sig = base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest()) return tob('!') + sig + tob('?') + msg @@ -2606,7 +2606,7 @@ def cookie_decode(data, key): data = tob(data) if cookie_is_encoded(data): sig, msg = data.split(tob('?'), 1) - if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg).digest())): + if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest())): return pickle.loads(base64.b64decode(msg)) return None |