HomePhabricator

SECURITY: API: Use constant-time comparison for watchlist token

Authored by demon.

Description

SECURITY: API: Use constant-time comparison for watchlist token

Avoids a theoretical timing attack.

Includes backport of hash_equals() compat function from Iece006e

Bug: T94116
Change-Id: Ia4a2b13bd5d3cd256c6b2deada224148dc2888a6