From 2cdaa24735e48b3872d5f6492a975c7e63f6ecc2 Mon Sep 17 00:00:00 2001 From: xiaoxia Date: Mon, 13 Jul 2026 00:49:50 +0800 Subject: [PATCH] fix(security): add nosec for bandit B324 md5 in feature flag --- packages/adapters/redis/feature_flag_store.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/adapters/redis/feature_flag_store.py b/packages/adapters/redis/feature_flag_store.py index df857115f..f64f6eb0b 100755 --- a/packages/adapters/redis/feature_flag_store.py +++ b/packages/adapters/redis/feature_flag_store.py @@ -84,7 +84,7 @@ class FeatureFlagConfig: # 基于 identifier 做哈希取模，确保同一用户始终落在同一侧 if identifier: - hash_val = int(hashlib.md5(f"{self.name}:{identifier}".encode("utf-8")).hexdigest(), 16) + hash_val = int(hashlib.md5(f"{self.name}:{identifier}".encode("utf-8")).hexdigest(), 16) # nosec B324 - 用于哈希取模做百分比切流，非安全用途 return (hash_val % 100) < self.percentage # 无 identifier 且百分比在 0-100 之间 → 按比例随机（不保证一致性）