X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/bb2ffab9ec0ce6ff4c2ee69ddfa57e4f75963685..4b78b0267dcb7e67d5a198581383b93e22196fce:/script/deliver-message

diff --git a/script/deliver-message b/script/deliver-message
index 047969532..087a117c3 100755
--- a/script/deliver-message
+++ b/script/deliver-message
@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-require File.dirname(__FILE__) + "/../config/environment"
+require File.join(File.dirname(__FILE__), "..", "config", "environment")
 
 if recipient = ARGV[0].match(/^c-(\d+)-(\d+)-(.*)$/)
   comment = DiaryComment.find(recipient[1])
@@ -20,8 +20,8 @@ else
   exit 0
 end
 
+exit 0 unless ActiveSupport::SecurityUtils.secure_compare(token, digest[0, 6])
 exit 0 unless from.active?
-exit 0 unless token == digest[0, 6]
 exit 0 if date < 1.month.ago
 
 message&.update(:message_read => true)