1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/activesupport/lib/active_support
Coda Hale 5e6dab8b34 Fix timing attack vulnerability in ActiveSupport::MessageVerifier.
Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC.

Signed-off-by: Michael Koziarski <michael@koziarski.com>
2009-09-04 09:25:38 +12:00
..
cache Merge docrails 2009-07-25 16:03:58 +01:00
core_ext Duplicating the options hash in Date#advance to prevent modification of the original [#1133 state:resolved] 2009-08-31 13:02:19 -05:00
deprecation Fix deprecating =-methods by using send [#2431 status:resolved] 2009-08-09 15:54:56 +01:00
json Fix that JSON parser fails to read escaped backslashes. 2009-08-09 22:30:44 -07:00
locale
multibyte Correctly handle offsets in Multibyte::Chars#index and #rindex. 2009-08-09 23:30:41 -07:00
ruby
testing Get Initializer tests running without requiring parts of Rails being loaded first 2009-07-06 12:25:34 -07:00
time
values Kathmandu TimeZone: reference Asia/Kathmandu zone directly instead of through linked timezone 2009-06-07 21:43:44 -05:00
vendor Merge branch 'master' of git://github.com/rails/rails 2009-07-02 10:25:18 +02:00
xml_mini Merge docrails 2009-07-25 16:03:58 +01:00
all.rb
autoload.rb Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern. 2009-05-28 11:35:36 -05:00
backtrace_cleaner.rb
base64.rb
basic_object.rb
buffered_logger.rb Merge docrails 2009-07-25 16:03:58 +01:00
cache.rb More perf work: 2009-08-11 15:03:53 -07:00
callbacks.rb Merge docrails 2009-07-25 16:03:58 +01:00
concern.rb AS::Concern redefines "include" to lazy include modules as dependencies 2009-05-29 17:03:23 -05:00
concurrent_hash.rb
core_ext.rb
dependencies.rb Simplify helper use of ActiveSupport::Dependencies, and use super better for in #helpers 2009-06-10 12:15:30 -07:00
dependency_module.rb Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern. 2009-05-28 11:35:36 -05:00
deprecation.rb
duration.rb make #inspect if zero length duration return '0 seconds' instead of empty string [#2838 state:resolved] 2009-07-02 11:22:25 -07:00
gzip.rb
hash_with_indifferent_access.rb ActiveSupport Hash optimizations [#2902 state:resolved] 2009-07-15 13:23:05 -07:00
inflections.rb
inflector.rb Fix that irregular plural inflections should not be double-pluralized: 'people'.pluralize should return 'people' not 'peoples'. 2009-08-09 20:28:57 -07:00
json.rb JSON: split encoding and coercion 2009-06-08 13:21:30 -07:00
memoizable.rb make private_and_public_methods unmemoizable [#2372 state:resolved] 2009-08-09 20:04:48 -05:00
message_encryptor.rb
message_verifier.rb Fix timing attack vulnerability in ActiveSupport::MessageVerifier. 2009-09-04 09:25:38 +12:00
mini.rb Use active_support/mini since we just need inflections. 2009-07-06 18:38:27 +02:00
multibyte.rb
new_callbacks.rb wycats forgot a +1, so I added it [#2749 state:resolved] 2009-07-02 11:39:06 -07:00
option_merger.rb
ordered_hash.rb Fixed ActiveSupport::OrderedHash::[] work identically to ::Hash::[] in ruby 1.8.7 [#2832 state:resolved] 2009-07-02 12:01:05 -07:00
ordered_options.rb
rescuable.rb
secure_random.rb
string_inquirer.rb
test_case.rb Ruby 1.9.2 compat: name method was renamed to __name__ since MiniTest 1.4.x [#2922 state:resolved] 2009-07-21 01:15:51 -07:00
time.rb
time_with_zone.rb JSON: split encoding and coercion 2009-06-08 13:21:30 -07:00
vendor.rb Use the i18n gem if present instead of vendor code. [#2871 state:resolved] 2009-07-07 18:36:42 -07:00
version.rb Bump up the version to 3.0.pre 2009-06-30 14:37:12 -07:00
whiny_nil.rb
xml_mini.rb