git.openstreetmap.org Git - rails.git/commit

]> git.openstreetmap.org Git - rails.git/commit

author	Tom Hughes <tom@compton.nu>
	Tue, 7 Nov 2023 17:16:21 +0000 (17:16 +0000)
committer	Tom Hughes <tom@compton.nu>
	Tue, 7 Nov 2023 17:22:40 +0000 (17:22 +0000)
commit	55a05d9e809775a6ea6305add096022ef1ec70e4
tree	fc2d08a0a7426c8b9ea56c515c86921a5f3c4611	tree \| snapshot
parent	58190488f831de3f59e3ef046aeca9e2dacfd606	commit \| diff

Use secure_compare to compare passwords and tokens

It's unlikely there is an explotable attack here given than network
latencies and variability will swamp any local timing differences but
it's best practice and there's no reason not to.

lib/password_hash.rb		diff \| blob \| history
script/deliver-message		diff \| blob \| history

The OpenStreetMap web site

RSS Atom