SECURITY: Make token comparison constant time
authorcsteipp <csteipp@wikimedia.org>
Fri, 14 Feb 2014 01:18:40 +0000 (17:18 -0800)
committermglaser <glaser@hallowelt.biz>
Thu, 27 Feb 2014 14:13:09 +0000 (15:13 +0100)
commit74ce391e9c115320e74c06772ee4fcb610ae33c4
treef750711e341a47f5a940a34cb9f867e4ad5a0a29
parentb1f04d33ee7d5634d636aeafd988272ca94db712
SECURITY: Make token comparison constant time

It seems like our token comparison would be vulnerable to timing
attacks. This will take constant time.

Bug: 61346
Change-Id: I2a9e89120f7092015495e638c6fa9f67adc9b84f
includes/User.php