Changeset 14583 for sites/trunk/api.wordpress.org/public_html/dotorg/slack/committers.php

Timestamp:

10/31/2025 05:52:50 AM (3 months ago)

Author:

dd32

Message:

Slack: Use hahs_equals() when comparing webhook tokens.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/slack/committers.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/slack/committers.php

@@ -7 +7 @@
 require dirname( dirname( __DIR__ ) ) . '/includes/slack-config.php';
 
-if ( $_POST['token'] !== WEBHOOK_TOKEN ) {
+if ( ! hash_equals( WEBHOOK_TOKEN, $_POST['token'] ) ) {
     return;
 }