From c6a5a1aae4328058afc62576c72f1f1c7718ba65 Mon Sep 17 00:00:00 2001
From: Blank <wangfj11@foxmail.com>
Date: Thu, 30 Jul 2026 02:05:46 +0800
Subject: [PATCH] =?UTF-8?q?fix(hash):=20=E6=8A=91=E5=88=B6=20Md5Helper.Has?=
 =?UTF-8?q?hAsync(Stream)=20=E7=9A=84=20Sonar=20S4790=20=E5=BC=B1=E5=93=88?=
 =?UTF-8?q?=E5=B8=8C=E5=91=8A=E8=AD=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Linear: GFX-205
---
 GameFrameX.Foundation.Hash/Md5Helper.cs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/GameFrameX.Foundation.Hash/Md5Helper.cs b/GameFrameX.Foundation.Hash/Md5Helper.cs
index a6e8c36..02485f6 100644
--- a/GameFrameX.Foundation.Hash/Md5Helper.cs
+++ b/GameFrameX.Foundation.Hash/Md5Helper.cs
@@ -31,6 +31,7 @@
 //  Official Documentation: https://gameframex.doc.alianblank.com/
 // ==========================================================================================
 
+using System.Diagnostics.CodeAnalysis;
 using System.Security.Cryptography;
 using System.Text;
 
@@ -163,6 +164,7 @@ public static string Hash(Stream input)
     /// <param name="input">要计算哈希值的流 / The stream to compute the hash for</param>
     /// <param name="cancellationToken">用于取消异步操作的令牌 / Token used to cancel the asynchronous operation</param>
     /// <returns>小写十六进制字符串形式的哈希值 / The lowercase hexadecimal hash value</returns>
+    [SuppressMessage("Sonar Code Smell", "S4790:Use a stronger hashing algorithm", Justification = "MD5 is intentionally used here for non-cryptographic checksum / fingerprint / cache-key scenarios; for security-sensitive use cases call Sha256Helper instead.")]
     public static async Task<string> HashAsync(Stream input, CancellationToken cancellationToken = default)
     {
         ArgumentNullException.ThrowIfNull(input, nameof(input));