epriestley 29948eaa5b Use phutil_hashes_are_identical() when comparing hashes in Phabricator ... Summary: See D14025. In all cases where we compare hashes, use strict, constant-time comparisons. Test Plan: Logged in, logged out, added TOTP, ran Conduit, terminated sessions, submitted forms, changed password. Tweaked CSRF token, got rejected. Reviewers: chad Reviewed By: chad Subscribers: chenxiruanhai Differential Revision: https://secure.phabricator.com/D14026		2015-09-01 15:52:44 -07:00
..
__tests__	Various linter fixes	2015-08-11 22:36:55 +10:00
password	Use phutil_hashes_are_identical() when comparing hashes in Phabricator	2015-09-01 15:52:44 -07:00
PhabricatorGlobalLock.php	Improve messaging around repository locks	2015-04-27 10:25:53 -07:00
PhabricatorHash.php	phtize all the things	2015-05-22 21:16:39 +10:00
PhabricatorSlug.php	Extend from Phobject	2015-06-15 18:02:27 +10:00
PhabricatorSSHKeyGenerator.php	Add a "Generate Keypair" option on the SSH Keys panel	2014-03-12 18:17:11 -07:00