Skip to content
Commit ad57a939 authored by Vikrum Nijjar's avatar Vikrum Nijjar Committed by Jehiah Czebotar
Browse files

Fixed timing attack in cookie validation. 

- Changed from using string == to hmac.Equal
- See more details here: http://verboselogging.com/2012/08/20/a-timing-attack-in-action
parent 2f165345
Hide whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment