rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Improve performance of MessageVerifier while keeping it constant time	wycats	2010-06-04	1	-4/+4
\|
*	message_verifier.rb needs active_support/core_ext/object/blank	Xavier Noria	2010-01-01	1	-0/+1
\|
*	message_verifier.rb needs active_support/base64	Xavier Noria	2010-01-01	1	-0/+2
\|
*	String#bytesize is not needed for Ruby >= 1.8.7	Xavier Noria	2009-11-09	1	-2/+0
\|
*	Ensure MessageVerifier raises appropriate exception on tampered data	Pratik Naik	2009-10-09	1	-1/+1
\|
*	MessageVerifier#verify raises InvalidSignature if the signature is blank	Jeffrey Hardy	2009-10-05	1	-0/+2
\| \| \| \|	Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net>
*	Use OpenSSL::Digest.const(...).new instead of OpenSSL::Digest::Digest.new(...)	Jeremy Kemper	2009-09-24	1	-1/+1
\|
*	Explicitly require String#bytesize extension	Jeremy Kemper	2009-09-24	1	-0/+2
\|
*	Prefer not to shadow a local	Jeremy Kemper	2009-09-13	1	-1/+1
\|
*	making secure_compare faster	Aaron Patterson	2009-09-13	1	-28/+8
\| \| \| \| \| \|	[#3195 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net>
*	Dup the arguments to string compare so we can use force_encoding.	Michael Koziarski	2009-09-13	1	-2/+2
\|
*	Revert "ruby 1.9 friendly secure_compare" because it breaks CI and Sam ↵	Yehuda Katz	2009-09-12	1	-6/+9
\| \| \| \| \| \|	Ruby's suite This reverts commit 5de75398c495f109772b622291362a98bc6c21d1.
*	ruby 1.9 friendly secure_compare	Jakub Kuźma	2009-09-12	1	-9/+6
\| \| \| \|	Signed-off-by: Michael Koziarski <michael@koziarski.com>
*	Ruby 1.9: fix MessageVerifier#secure_compare	Jeremy Kemper	2009-09-08	1	-9/+27
\|
*	Fix timing attack vulnerability in ActiveSupport::MessageVerifier.	Coda Hale	2009-09-04	1	-3/+16
\| \| \| \| \| \|	Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC. Signed-off-by: Michael Koziarski <michael@koziarski.com>
*	Lazy-require OpenSSL	Jeremy Kemper	2008-11-23	1	-1/+2
\|
*	Don't need _message as it's in the class name already	Michael Koziarski	2008-11-23	1	-4/+4
\|
*	Add ActiveSupport::MessageVerifier to aid users who need to store ↵	Michael Koziarski	2008-11-23	1	-0/+45
	tamper-proof messages in cookies etc. This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails.