f2etest icon indicating copy to clipboard operation
f2etest copied to clipboard

Hard-coded Password in HMAC

Open tianjk99 opened this issue 1 year ago • 0 comments

Please check if there is any problem with using fixed password.

  1. f2etest-web\control\statteam.js, line 119

The presence of a hardcoded password in the HMAC implementation introduces vulnerabilities that can compromise the security of our application. Using a fixed password may reduce security and easily cause key exposure, difficulty in key rotation, and encryption failure. For enhanced security, it is recommended to remove hardcoded passwords and store passwords securely using industry-standard practices such as hashing and salting.

tianjk99 avatar Dec 08 '23 13:12 tianjk99