epriestley 29948eaa5b Use phutil_hashes_are_identical() when comparing hashes in Phabricator ... Summary: See D14025. In all cases where we compare hashes, use strict, constant-time comparisons. Test Plan: Logged in, logged out, added TOTP, ran Conduit, terminated sessions, submitted forms, changed password. Tweaked CSRF token, got rejected. Reviewers: chad Reviewed By: chad Subscribers: chenxiruanhai Differential Revision: https://secure.phabricator.com/D14026		2015-09-01 15:52:44 -07:00
..
application	[Redesign] Fix alignment of icon/grip on ObjectList	2015-06-16 13:09:48 -07:00
capability	People - refine permissions on creating new users	2015-02-05 16:47:09 -08:00
conduit	Add "Mailing List" users	2015-06-03 18:42:33 -07:00
config	Add getGroup to ConfigOptions	2015-02-09 13:10:56 -08:00
controller	Fix public/private profile edit note	2015-07-27 15:12:03 -07:00
customfield	Add "Mailing List" users	2015-06-03 18:42:33 -07:00
editor	Add "Mailing List" users	2015-06-03 18:42:33 -07:00
event	Add Badges to Hovercards	2015-07-24 10:58:13 -07:00
garbagecollector	Add a GC for user logs	2014-02-03 10:51:41 -08:00
lipsum	Rename PhutilRealnameContextFreeGrammar for consistency	2015-01-06 12:04:19 +11:00
markup	Replace user "status" with "availability"	2015-05-14 11:15:04 -07:00
phid	Add "Mailing List" users	2015-06-03 18:42:33 -07:00
query	Badges ... on your profile	2015-07-23 11:46:34 -07:00
search	Fix a broken class reference	2015-07-07 22:53:13 +10:00
searchfield	Fix a broken class reference	2015-07-07 22:53:13 +10:00
storage	Use phutil_hashes_are_identical() when comparing hashes in Phabricator	2015-09-01 15:52:44 -07:00
typeahead	Mark some strings for translation	2015-06-09 23:06:52 +10:00
view	Let users review their own account activity logs	2014-04-27 17:32:09 -07:00