mirror of
https://we.phorge.it/source/phorge.git
synced 2024-12-20 04:20:55 +01:00
29948eaa5b
Summary: See D14025. In all cases where we compare hashes, use strict, constant-time comparisons. Test Plan: Logged in, logged out, added TOTP, ran Conduit, terminated sessions, submitted forms, changed password. Tweaked CSRF token, got rejected. Reviewers: chad Reviewed By: chad Subscribers: chenxiruanhai Differential Revision: https://secure.phabricator.com/D14026 |
||
---|---|---|
.. | ||
PhabricatorMetaMTAController.php | ||
PhabricatorMetaMTAMailgunReceiveController.php | ||
PhabricatorMetaMTAMailListController.php | ||
PhabricatorMetaMTAMailViewController.php | ||
PhabricatorMetaMTASendGridReceiveController.php |