From 50fcc831bf41bef2f1db49371b005c95b3f4db6b Mon Sep 17 00:00:00 2001 From: Laurent Peuch Date: Sat, 27 May 2017 19:19:48 +0200 Subject: [PATCH] [mod] comment didn't matched reality --- helpers.lua | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/helpers.lua b/helpers.lua index b29f90b..e8a7787 100644 --- a/helpers.lua +++ b/helpers.lua @@ -77,10 +77,9 @@ function hmac_sha512(key, message) if not cache:get(cache_key) then -- lua ecosystem is a disaster and it was not possible to find a good -- easily multiplatform integrable code for this - -- Python has this buildin, so we call it directly -- - -- this is a bad and probably leak the key and the message in the process list - -- but if someone got there I guess we really have other problems + -- this is really dirty and probably leak the key and the message in the process list + -- but if someone got there I guess we really have other problems so this is acceptable -- and also this is way better than the previous situation local pipe = io.popen("echo -n '" ..message.. "' | openssl sha512 -hmac '" ..key.. "'")