KamoCRM

Constant-time internal-auth secret compare (timing oracle)

FixVOIPService
Ya
8 Julai 2026, 04:38 UTC
Mwandishi
Kamo
Ahadi ya
183f2d0

Replace String.equals with MessageDigest.isEqual so response latency cannot leak the X-Internal-Auth shared secret byte-by-byte. Fleet-wide sweep of the copy-pasted InternalAuthFilter (same fix already shipped in the eClose and underwriting services).

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru MileleMtazamo wa bei