From f02ecf0235cb17c90e9d1d8c155bd64e729fa46e Mon Sep 17 00:00:00 2001 From: Jakob Heher Date: Thu, 16 Apr 2026 16:14:46 +0200 Subject: fix some semgrep reported issues (#83) --- .../pdfas/lib/impl/stamping/pdfbox2/PDFAsVisualSignatureBuilder.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'pdf-as-pdfbox-2/src/main/java') diff --git a/pdf-as-pdfbox-2/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/pdfbox2/PDFAsVisualSignatureBuilder.java b/pdf-as-pdfbox-2/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/pdfbox2/PDFAsVisualSignatureBuilder.java index 5501eff8..50268a1c 100644 --- a/pdf-as-pdfbox-2/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/pdfbox2/PDFAsVisualSignatureBuilder.java +++ b/pdf-as-pdfbox-2/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/pdfbox2/PDFAsVisualSignatureBuilder.java @@ -127,9 +127,9 @@ public class PDFAsVisualSignatureBuilder extends PDVisibleSigBuilder implements public String createHashedId(String value) { try { - MessageDigest md = MessageDigest.getInstance("SHA-1"); + MessageDigest md = MessageDigest.getInstance("SHA-256"); md.reset(); - return Hex.encodeHexString(md.digest(value.getBytes("UTF-8"))); + return Hex.encodeHexString(md.digest(value.getBytes(StandardCharsets.UTF_8))); } catch (Throwable e) { logger.warn("Failed to generate ID for Image using value", e); return value; -- cgit v1.2.3