Changeset 14583 for sites/trunk/api.wordpress.org/public_html/dotorg/slack/subgroup.php

Timestamp:

10/31/2025 05:52:50 AM (3 months ago)

Author:

dd32

Message:

Slack: Use hahs_equals() when comparing webhook tokens.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/slack/subgroup.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/slack/subgroup.php

@@ -48 +48 @@
 
 // Confirm it came from Slack.
-if ( $_POST['token'] !== WEBHOOK_TOKEN ) {
+if ( ! hash_equals( WEBHOOK_TOKEN, $_POST['token'] ?? '' ) ) {
     die( "Invalid Token" );
 }