Use secure_compare for hmac comparison
authorJames Tucker <jftucker@gmail.com>
Thu, 7 Feb 2013 22:47:10 +0000 (14:47 -0800)
committerJames Tucker <jftucker@gmail.com>
Thu, 7 Feb 2013 22:47:10 +0000 (14:47 -0800)
commit0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07
tree6a2bf14a2e7e0661abfc61ad62c1e369937d5d68
parent9a81b961457805f6d1a5c275d053068440421e11
Use secure_compare for hmac comparison

 * Closes CVE-2013-0263
lib/rack/session/cookie.rb