revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2025-02-27 05:59:08 +01:00
Code Issues Releases Wiki Activity
phorge-phorge/src/applications/conduit/method
History
epriestley 29948eaa5b Use phutil_hashes_are_identical() when comparing hashes in Phabricator 
Summary: See D14025. In all cases where we compare hashes, use strict, constant-time comparisons.

Test Plan: Logged in, logged out, added TOTP, ran Conduit, terminated sessions, submitted forms, changed password. Tweaked CSRF token, got rejected.

Reviewers: chad

Reviewed By: chad

Subscribers: chenxiruanhai

Differential Revision: https://secure.phabricator.com/D14026
2015-09-01 15:52:44 -07:00
..
__tests__ Add a bunch of tests for subclass implementations 2015-06-15 18:13:27 +10:00
ConduitAPIMethod.php Use PhutilClassMapQuery instead of PhutilSymbolLoader 2015-08-14 07:49:01 +10:00
ConduitConnectConduitAPIMethod.php Use phutil_hashes_are_identical() when comparing hashes in Phabricator 2015-09-01 15:52:44 -07:00
ConduitGetCapabilitiesConduitAPIMethod.php Give Conduit params/return/errors protected visibility 2015-04-13 11:58:35 -07:00
ConduitGetCertificateConduitAPIMethod.php phtize all the things 2015-05-22 21:16:39 +10:00
ConduitPingConduitAPIMethod.php phtize all the things 2015-05-22 21:16:39 +10:00
ConduitQueryConduitAPIMethod.php Use PhutilClassMapQuery instead of PhutilSymbolLoader 2015-08-14 07:49:01 +10:00