9f089ac48c
Ruby str_equal uses memcmp internally to compare String. Memcmp is vunerable to timing attacks because it returns early on mismatch (on most x32 platforms memcmp uses a bytewise comparision). Devise.secure_compare implements a constant time comparision instead. |
||
|---|---|---|
| .. | ||
| api.rb | ||
| api_guard.rb | ||
| branches.rb | ||
| commits.rb | ||
| deploy_keys.rb | ||
| entities.rb | ||
| files.rb | ||
| group_members.rb | ||
| groups.rb | ||
| helpers.rb | ||
| internal.rb | ||
| issues.rb | ||
| labels.rb | ||
| merge_requests.rb | ||
| milestones.rb | ||
| namespaces.rb | ||
| notes.rb | ||
| project_hooks.rb | ||
| project_members.rb | ||
| project_snippets.rb | ||
| projects.rb | ||
| repositories.rb | ||
| services.rb | ||
| session.rb | ||
| system_hooks.rb | ||
| users.rb | ||