innov
/
django1
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity

Fixed #29141 -- Corrected BCryptPasswordHasher's docstring about truncation.

This commit is contained in:
Tim Graham 2018-02-26 09:12:46 -05:00
parent 074a2f7f58
commit 56a302f338
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
django/contrib/auth/hashers.py
View File

@ -456,10 +456,8 @@ class BCryptPasswordHasher(BCryptSHA256PasswordHasher):
issues.
This hasher does not first hash the password which means it is subject to
the 72 character bcrypt password truncation, most use cases should prefer
the BCryptSHA256PasswordHasher.
See: https://code.djangoproject.com/ticket/20138
bcrypt's 72 bytes password truncation. Most use cases should prefer the
BCryptSHA256PasswordHasher.
"""
algorithm = "bcrypt"
digest = None