Edgewall Software
Modify ↓

Opened 3 years ago

Closed 2 years ago

Last modified 2 years ago

#13465 closed defect (fixed)

hmac.compare_digest should be used to compare password hashes in trac/web/auth.py

Reported by: Jun Omae Owned by: Jun Omae
Priority: normal Milestone: 1.4.4
Component: web frontend Version:
Severity: normal Keywords:
Cc: Branch:
Release Notes:

Use hmac.compare_digest to compare password hashes.

API Changes:
Internal Changes:

Description

See ​https://docs.python.org/2/library/hmac.html#hmac.compare_digest

Attachments (0)

Change History (3)

comment:1 by Ryan J Ollos, 3 years ago

Milestone: 1.4.4 → 1.4.5

comment:2 by Jun Omae, 2 years ago

Milestone: 1.4.5 → 1.4.4
Release Notes: modified (diff)
Resolution: → fixed
Status: new → closed

Fixed in [17615] and merged into trunk in [17616].

comment:3 by Jun Omae, 2 years ago

Owner: set to Jun Omae

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Jun Omae.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from Jun Omae to the specified user.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.