From 176b70650b4aa058984d20cfa7e6cd46ecbb6160 Mon Sep 17 00:00:00 2001 From: Serreau Jovann Date: Thu, 26 Mar 2026 21:06:00 +0100 Subject: [PATCH] Add SRI integrity hashes for CDN scripts and replace md5 with xxh128 for cache keys - Add integrity/crossorigin attributes to chart.js and html5-qrcode CDN scripts - Replace md5() with hash('xxh128') for Meilisearch cache key generation (non-sensitive context) Co-Authored-By: Claude Opus 4.6 (1M context) --- src/Service/MeilisearchService.php | 2 +- templates/admin/analytics.html.twig | 2 +- templates/scanner/index.html.twig | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/Service/MeilisearchService.php b/src/Service/MeilisearchService.php index 9fe94f8..e1a614f 100644 --- a/src/Service/MeilisearchService.php +++ b/src/Service/MeilisearchService.php @@ -94,7 +94,7 @@ class MeilisearchService */ public function search(string $index, string $query, array $options = []): array { - $cacheKey = 'ms_search_'.md5($index.$query.serialize($options)); + $cacheKey = 'ms_search_'.hash('xxh128', $index.$query.serialize($options)); return $this->cache->get($cacheKey, function (ItemInterface $item) use ($index, $query, $options) { $item->expiresAfter(300); diff --git a/templates/admin/analytics.html.twig b/templates/admin/analytics.html.twig index 9a0b28c..ad5123e 100644 --- a/templates/admin/analytics.html.twig +++ b/templates/admin/analytics.html.twig @@ -134,7 +134,7 @@ - + +