flake8
passed.
JSHint
passed.
Prevent timing attacks when validating credentials
Review Request #9795 — Created March 16, 2018 and submitted
We now use constant time comparison to compare the credentials to the
configuration. We also do not short circuit the operation in the case
that the username is incorrect.
Ran unit tests.
Change Summary:
Rebasing all patches.
Commit: |
|
||||
|---|---|---|---|---|---|
Diff: |
Revision 2 (+5 -1) |
Checks run (2 succeeded)
flake8
passed.
JSHint
passed.
Change Summary:
Fix Config -> config from rebase.
Commit: |
|
||||
|---|---|---|---|---|---|
Diff: |
Revision 3 (+5 -1) |
Checks run (2 succeeded)
flake8
passed.
JSHint
passed.