Reword disclaimer regarding hash collision attacks (#557)

sjakobi · web-flow · commit 9c19d1e060a1 · 2025-11-26T19:17:29.000+01:00
The old wording could be misunderstood to mean that even HashMap
_values_ from untrusted sources could be problematic. The new
wording stresses that the _keys_ are the problem.
diff --git a/unordered-containers.cabal b/unordered-containers.cabal
@@ -13,7 +13,7 @@ description:
   .
   This package currently provides no defenses against hash collision attacks
   such as HashDoS.
-  Users who need to store input from untrusted sources are advised to use
+  Users who need to store keys derived from untrusted input are advised to use
   @Data.Map@ or @Data.Set@ from the @containers@ package instead.
 license:        BSD3
 license-file:   LICENSE

Original file line number	Diff line number	Diff line change
`@@ -13,7 +13,7 @@ description:`
`13`	`13`	`.`
`14`	`14`	`This package currently provides no defenses against hash collision attacks`
`15`	`15`	`such as HashDoS.`
`16`		`- Users who need to store input from untrusted sources are advised to use`
	`16`	`+ Users who need to store keys derived from untrusted input are advised to use`
`17`	`17`	`@Data.Map@ or @Data.Set@ from the @containers@ package instead.`
`18`	`18`	`license: BSD3`
`19`	`19`	`license-file: LICENSE`