[TASK] Use hash_equals for timing-safe comparison of hash-values
To prevent timing-attacks on hash-comparions it is advised to use hash_equals. Resolves: #83329 Releases: master, 8.7 Change-Id: I7539ed27538d7d81767bfce582d568cff09d1610 Reviewed-on: https://review.typo3.org/55074 Tested-by:TYPO3com <no-reply@typo3.com> Reviewed-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
Susanne Moog <susanne.moog@typo3.org> Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
Helmut Hummel <typo3@helhum.io> Tested-by:
Helmut Hummel <typo3@helhum.io>
Showing
- typo3/sysext/backend/Classes/Controller/FileSystemNavigationFrameController.php 1 addition, 1 deletion...lasses/Controller/FileSystemNavigationFrameController.php
- typo3/sysext/backend/Classes/Controller/FormInlineAjaxController.php 1 addition, 1 deletion...t/backend/Classes/Controller/FormInlineAjaxController.php
- typo3/sysext/backend/Classes/Controller/LinkBrowserController.php 1 addition, 1 deletion...sext/backend/Classes/Controller/LinkBrowserController.php
- typo3/sysext/backend/Classes/Form/Wizard/ImageManipulationWizard.php 1 addition, 1 deletion...t/backend/Classes/Form/Wizard/ImageManipulationWizard.php
- typo3/sysext/core/Classes/Controller/FileDumpController.php 1 addition, 1 deletiontypo3/sysext/core/Classes/Controller/FileDumpController.php
- typo3/sysext/core/Classes/FormProtection/AbstractFormProtection.php 1 addition, 1 deletion...xt/core/Classes/FormProtection/AbstractFormProtection.php
- typo3/sysext/extbase/Classes/Security/Cryptography/HashService.php 1 addition, 1 deletion...ext/extbase/Classes/Security/Cryptography/HashService.php
- typo3/sysext/frontend/Classes/Controller/ShowImageController.php 1 addition, 1 deletion...ysext/frontend/Classes/Controller/ShowImageController.php
- typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php 1 addition, 1 deletion...ntend/Classes/Controller/TypoScriptFrontendController.php
- typo3/sysext/saltedpasswords/Classes/Salt/Pbkdf2Salt.php 1 addition, 1 deletiontypo3/sysext/saltedpasswords/Classes/Salt/Pbkdf2Salt.php
- typo3/sysext/saltedpasswords/Classes/Salt/PhpassSalt.php 1 addition, 1 deletiontypo3/sysext/saltedpasswords/Classes/Salt/PhpassSalt.php
- typo3/sysext/saltedpasswords/Classes/SaltedPasswordService.php 2 additions, 2 deletions.../sysext/saltedpasswords/Classes/SaltedPasswordService.php
Please register or sign in to comment