epriestley 29948eaa5b Use phutil_hashes_are_identical() when comparing hashes in Phabricator ... Summary: See D14025. In all cases where we compare hashes, use strict, constant-time comparisons. Test Plan: Logged in, logged out, added TOTP, ran Conduit, terminated sessions, submitted forms, changed password. Tweaked CSRF token, got rejected. Reviewers: chad Reviewed By: chad Subscribers: chenxiruanhai Differential Revision: https://secure.phabricator.com/D14026		2015-09-01 15:52:44 -07:00
..
__tests__	Add a bunch of tests for subclass implementations	2015-06-15 18:13:27 +10:00
ConduitAPIMethod.php	Use PhutilClassMapQuery instead of PhutilSymbolLoader	2015-08-14 07:49:01 +10:00
ConduitConnectConduitAPIMethod.php	Use phutil_hashes_are_identical() when comparing hashes in Phabricator	2015-09-01 15:52:44 -07:00
ConduitGetCapabilitiesConduitAPIMethod.php	Give Conduit params/return/errors protected visibility	2015-04-13 11:58:35 -07:00
ConduitGetCertificateConduitAPIMethod.php	phtize all the things	2015-05-22 21:16:39 +10:00
ConduitPingConduitAPIMethod.php	phtize all the things	2015-05-22 21:16:39 +10:00
ConduitQueryConduitAPIMethod.php	Use PhutilClassMapQuery instead of PhutilSymbolLoader	2015-08-14 07:49:01 +10:00