HomePhabricator

SECURITY: API: Use constant-time comparison for watchlist token

Authored by Anomie.

Description

SECURITY: API: Use constant-time comparison for watchlist token

Avoids a theoretical timing attack.

Bug: T94116
Change-Id: Ia4a2b13bd5d3cd256c6b2deada224148dc2888a6

Details

Committed
demonAug 10 2015, 8:35 PM
Parents
rMWfd1124b0cd10: Read extension.json files in the web updater
Branches
Unknown
Tags
Unknown
References
refs/changes/65/230665/1
ChangeId
Ia4a2b13bd5d3cd256c6b2deada224148dc2888a6