ACS AEM Commons Versioned Clientlibs | Community
Skip to main content
umair14
umair14
October 30, 2020
Solved

ACS AEM Commons Versioned Clientlibs

  • October 30, 2020
  • 1 reply
  • 1509 views

Hi All, ACS AEM Commons Versioned ClientLibs uses Sling Rewriter to rewrite the client libraries generated by aem and append a unique MD5 value at the end of the client library URL and later it is cached. It generates a new MD5 value every time a modification to the client library happens and appends the generated MD5 value to the client library url for re-cashing. MD5 cryptographic algorithms are outdated and vulnerable to security. Is there another version of the Versioned ClientLibs or any other implementation that uses SHA2 Family (SHA256, SHA386, and SHA512) instead of MD5?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Singaiah_Chintalapudi

Thanks for calling out the security vulnerability. I guess the only option you've is to write you own custom logic to implement the MD5.

1 reply

Singaiah_Chintalapudi
Singaiah_ChintalapudiAccepted solution
October 30, 2020

Thanks for calling out the security vulnerability. I guess the only option you've is to write you own custom logic to implement the MD5.

    Terms & ConditionsAccessibility statement

    Loading footer...