Closed ioggstream closed 5 years ago
Forbids signing a blank string.
You should sign at least one HTTP header, or the signature could be used multiple times (replay attack).
@msporny do you agree?
Agree, merging.
This PR
Forbids signing a blank string.
You should sign at least one HTTP header, or the signature could be used multiple times (replay attack).