Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | use secure string comparisons for basic auth username / password | Aaron Patterson | 2016-01-22 | 1 | -0/+7 |
| | | | | | | this will avoid timing attacks against applications that use basic auth. CVE-2015-7576 | ||||
* | Add AS::SecurityUtils.secure_compare for constant time string comparison | Guillermo Iguaran | 2014-10-23 | 1 | -0/+20 |