| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | ruby 1.9 friendly secure_compare | Jakub Kuźma | 2009-09-12 | 1 | -9/+6 | |
| | | | | | Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
| * | Ruby 1.9: fix MessageVerifier#secure_compare | Jeremy Kemper | 2009-09-08 | 1 | -9/+27 | |
| | | ||||||
| * | Fix timing attack vulnerability in ActiveSupport::MessageVerifier. | Coda Hale | 2009-09-04 | 1 | -3/+16 | |
| | | | | | | | Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC. Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
| * | Lazy-require OpenSSL | Jeremy Kemper | 2008-11-23 | 1 | -1/+2 | |
| | | ||||||
| * | Don't need _message as it's in the class name already | Michael Koziarski | 2008-11-23 | 1 | -4/+4 | |
| | | ||||||
| * | Add ActiveSupport::MessageVerifier to aid users who need to store ↵ | Michael Koziarski | 2008-11-23 | 1 | -0/+45 | |
| tamper-proof messages in cookies etc. This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails. | ||||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |