diff options
author | Aaron Patterson <aaron.patterson@gmail.com> | 2015-10-29 10:42:44 -0700 |
---|---|---|
committer | Aaron Patterson <aaron.patterson@gmail.com> | 2016-01-22 14:55:14 -0800 |
commit | 17e6f1507b7f2c2a883c180f4f9548445d6dfbda (patch) | |
tree | e9dd60b7d1a2f90407b264c8e1f7555119e3c698 /railties/lib | |
parent | 099ddfdefd44fda11d0f6a72f934f8a0ee83141b (diff) | |
download | rails-17e6f1507b7f2c2a883c180f4f9548445d6dfbda.tar.gz rails-17e6f1507b7f2c2a883c180f4f9548445d6dfbda.tar.bz2 rails-17e6f1507b7f2c2a883c180f4f9548445d6dfbda.zip |
use secure string comparisons for basic auth username / password
this will avoid timing attacks against applications that use basic auth.
CVE-2015-7576
Diffstat (limited to 'railties/lib')
0 files changed, 0 insertions, 0 deletions