Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | applies new string literal convention in activesupport/lib | Xavier Noria | 2016-08-06 | 1 | -1/+1 |
| | | | | | The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default. | ||||
* | use secure string comparisons for basic auth username / password | Aaron Patterson | 2016-01-22 | 1 | -0/+7 |
| | | | | | | this will avoid timing attacks against applications that use basic auth. CVE-2015-7576 | ||||
* | Add AS::SecurityUtils.secure_compare for constant time string comparison | Guillermo Iguaran | 2014-10-23 | 1 | -0/+20 |