Changeset 14583 for sites/trunk/api.wordpress.org/public_html/dotorg/slack/announce.php

Timestamp:

10/31/2025 05:52:50 AM (3 months ago)

Author:

dd32

Message:

Slack: Use hahs_equals() when comparing webhook tokens.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/slack/announce.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/slack/announce.php

@@ -30 +30 @@
 // WEBHOOK_TOKEN_1, WEBHOOK_TOKEN_2, etc.
 while ( defined( __NAMESPACE__ . '\\WEBHOOK_TOKEN_' . ++$i ) ) {
-    if ( constant( __NAMESPACE__ . '\\WEBHOOK_TOKEN_' . $i ) === $_POST['token'] ) {
+    if ( hash_equals( constant( __NAMESPACE__ . '\\WEBHOOK_TOKEN_' . $i ), $_POST['token'] ) ) {
         run( $_POST );
     }