instance method
secure_compare
Ruby on Rails edge
Since v3.2.22.5 Private — implementation detail, not part of the public APISignature
secure_compare(a, b)Secure string comparison for strings of variable length.
While a timing attack would not be able to discern the content of a secret compared via secure_compare, it is possible to determine the secret length. This should be considered when using secure_compare to compare weak, short secrets to user input.
Parameters
-
areq -
breq
Source
# File activesupport/lib/active_support/security_utils.rb, line 32
def secure_compare(a, b)
a.bytesize == b.bytesize && fixed_length_secure_compare(a, b)
end
Defined in activesupport/lib/active_support/security_utils.rb line 32
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActiveSupport::SecurityUtils