fix #1181: digestmod parameter is now required since Python 3.8

bottlepy · Dec 1, 2019 · bdbab79 · bdbab79
1 parent 099c4a2
commit bdbab79
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/bottle.py b/bottle.py
@@ -2597,7 +2597,7 @@ def _lscmp(a, b):
 def cookie_encode(data, key):
     ''' Encode and sign a pickle-able object. Return a (byte) string '''
     msg = base64.b64encode(pickle.dumps(data, -1))
-    sig = base64.b64encode(hmac.new(tob(key), msg).digest())
+    sig = base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest())
     return tob('!') + sig + tob('?') + msg
 
 
@@ -2606,7 +2606,7 @@ def cookie_decode(data, key):
     data = tob(data)
     if cookie_is_encoded(data):
         sig, msg = data.split(tob('?'), 1)
-        if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg).digest())):
+        if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest())):
             return pickle.loads(base64.b64decode(msg))
     return None