Changeset 14583 for sites/trunk/api.wordpress.org/public_html/dotorg/slack/security-team.php

Timestamp:

10/31/2025 05:52:50 AM (5 weeks ago)

Author:

dd32

Message:

Slack: Use hahs_equals() when comparing webhook tokens.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/slack/security-team.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/slack/security-team.php

@@ -63 +63 @@
 
     // Confirm it came from the Trac server.
-    if ( $_GET['token'] !== API_TOKEN ) {
+    if ( ! hash_equals( API_TOKEN, $_GET['token'] ?? '' ) ) {
         exit;
     }