[TASK] Use hash_equals when comparing cryptographic hash values
Direct hash comparison is replaced by cryptographic-safe `hash_equals`. Changes in this patch set basically don't have much impact regarding security aspects. This is a preparation for starting with RIPS scanner. Resolves: #91565 Releases: master, 10.4, 9.5 Change-Id: I5666e586b6b6b462f7864a597139763fd2cd2f98 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64668 Tested-by:TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
Showing
- typo3/sysext/extensionmanager/Classes/Utility/Connection/TerUtility.php 1 addition, 1 deletion...xtensionmanager/Classes/Utility/Connection/TerUtility.php
- typo3/sysext/frontend/Classes/Middleware/FrontendUserAuthenticator.php 1 addition, 1 deletion...frontend/Classes/Middleware/FrontendUserAuthenticator.php
- typo3/sysext/impexp/Classes/Import.php 3 additions, 3 deletionstypo3/sysext/impexp/Classes/Import.php
- typo3/sysext/lowlevel/Classes/Command/CleanFlexFormsCommand.php 1 addition, 1 deletion...sysext/lowlevel/Classes/Command/CleanFlexFormsCommand.php
Please register or sign in to comment