| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Prefer not to shadow a local | Jeremy Kemper | 2009-09-13 | 1 | -1/+1 | |
| | | ||||||
| * | making secure_compare faster | Aaron Patterson | 2009-09-13 | 1 | -28/+8 | |
| | | | | | | | [#3195 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
| * | Dup the arguments to string compare so we can use force_encoding. | Michael Koziarski | 2009-09-13 | 1 | -2/+2 | |
| | | ||||||
| * | Revert "ruby 1.9 friendly secure_compare" because it breaks CI and Sam ↵ | Yehuda Katz | 2009-09-12 | 1 | -6/+9 | |
| | | | | | | | Ruby's suite This reverts commit 5de75398c495f109772b622291362a98bc6c21d1. | |||||
| * | ruby 1.9 friendly secure_compare | Jakub Kuźma | 2009-09-12 | 1 | -9/+6 | |
| | | | | | Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
| * | Ruby 1.9: fix MessageVerifier#secure_compare | Jeremy Kemper | 2009-09-08 | 1 | -9/+27 | |
| | | ||||||
| * | Fix timing attack vulnerability in ActiveSupport::MessageVerifier. | Coda Hale | 2009-09-04 | 1 | -3/+16 | |
| | | | | | | | Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC. Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
| * | Lazy-require OpenSSL | Jeremy Kemper | 2008-11-23 | 1 | -1/+2 | |
| | | ||||||
| * | Don't need _message as it's in the class name already | Michael Koziarski | 2008-11-23 | 1 | -4/+4 | |
| | | ||||||
| * | Add ActiveSupport::MessageVerifier to aid users who need to store ↵ | Michael Koziarski | 2008-11-23 | 1 | -0/+45 | |
| tamper-proof messages in cookies etc. This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails. | ||||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |