Open pethin opened 6 months ago
Replace === with crypto.subtle.timingSafeEqual in https://github.com/Sh4yy/cloudflare-email/blob/main/src/middlewares/auth.ts#L16 to prevent timing attacks.
===
crypto.subtle.timingSafeEqual
Example: https://developers.cloudflare.com/workers/examples/protect-against-timing-attacks/
Like this @pethin https://github.com/D3vl0per/cloudflare-email/blob/main/src/middlewares/auth.ts?
Can you create a PR @D3vl0per?
Done #18 @kcoderhtml !
thnks! hopefully @Sh4yy can merge both our PRs soon!
Replace
===
withcrypto.subtle.timingSafeEqual
in https://github.com/Sh4yy/cloudflare-email/blob/main/src/middlewares/auth.ts#L16 to prevent timing attacks.Example: https://developers.cloudflare.com/workers/examples/protect-against-timing-attacks/