instance method
secure_compare
Ruby on Rails 6.0.6.1
Since v3.2.22.5 Private — implementation detail, not part of the public APISignature
secure_compare(a, b)Constant time string comparison, for variable length strings.
The values are first processed by SHA256, so that we don’t leak length info via timing attacks.
Parameters
-
areq -
breq
Source
# File activesupport/lib/active_support/security_utils.rb, line 26
def secure_compare(a, b)
fixed_length_secure_compare(::Digest::SHA256.digest(a), ::Digest::SHA256.digest(b)) && a == b
end
Defined in activesupport/lib/active_support/security_utils.rb line 26
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActiveSupport::SecurityUtils