Index: openacs-4/packages/openacs-bootstrap3-theme/resources/widgets/login.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/openacs-bootstrap3-theme/resources/widgets/login.tcl,v diff -u -r1.7.2.1 -r1.7.2.2 --- openacs-4/packages/openacs-bootstrap3-theme/resources/widgets/login.tcl 9 Feb 2020 15:45:31 -0000 1.7.2.1 +++ openacs-4/packages/openacs-bootstrap3-theme/resources/widgets/login.tcl 19 Jun 2022 15:33:23 -0000 1.7.2.2 @@ -11,12 +11,7 @@ set portrait_id [acs_user::get_portrait_id -user_id $user_id] if {$portrait_id == 0} { set email [party::email -party_id $user_id] - if {[info commands ns_md5] ne ""} { - set md5 [string tolower [ns_md5 $email]] - } else { - package require md5 - set md5 [string tolower [md5::Hex [md5::md5 -- $email]]] - } + set md5 [string tolower [ns_md5 $email]] set src //www.gravatar.com/avatar/$md5?size=35&d=mm security::csp::require img-src www.gravatar.com } else { Index: openacs-4/packages/openacs-bootstrap5-theme/resources/widgets/login.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/openacs-bootstrap5-theme/resources/widgets/login.tcl,v diff -u -r1.1.2.1 -r1.1.2.2 --- openacs-4/packages/openacs-bootstrap5-theme/resources/widgets/login.tcl 1 Apr 2022 13:38:23 -0000 1.1.2.1 +++ openacs-4/packages/openacs-bootstrap5-theme/resources/widgets/login.tcl 19 Jun 2022 15:33:24 -0000 1.1.2.2 @@ -11,12 +11,7 @@ set portrait_id [acs_user::get_portrait_id -user_id $user_id] if {$portrait_id == 0} { set email [party::email -party_id $user_id] - if {[info commands ns_md5] ne ""} { - set md5 [string tolower [ns_md5 $email]] - } else { - package require md5 - set md5 [string tolower [md5::Hex [md5::md5 -- $email]]] - } + set md5 [string tolower [ns_md5 $email]] set src //www.gravatar.com/avatar/$md5?size=35&d=mm security::csp::require img-src www.gravatar.com } else { Index: openacs-4/packages/xowiki/tcl/includelet-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/includelet-procs.tcl,v diff -u -r1.239.2.89 -r1.239.2.90 --- openacs-4/packages/xowiki/tcl/includelet-procs.tcl 12 Apr 2022 08:44:19 -0000 1.239.2.89 +++ openacs-4/packages/xowiki/tcl/includelet-procs.tcl 19 Jun 2022 15:33:24 -0000 1.239.2.90 @@ -5015,12 +5015,7 @@ gravatar proc url {-email {-size 80} {-default mp}} { # reusable helper proc to compute a gravatar URL - if {[info commands ns_md5] ne ""} { - set md5 [string tolower [ns_md5 $email]] - } else { - package require md5 - set md5 [string tolower [md5::Hex [md5::md5 -- $email]]] - } + set md5 [string tolower [ns_md5 $email]] security::csp::require img-src www.gravatar.com return //www.gravatar.com/avatar/$md5?size=$size&d=$default }