Changeset 14583 for sites/trunk/api.wordpress.org/public_html/dotorg/slack/trac-bot.php

Timestamp:

10/31/2025 05:52:50 AM (3 months ago)

Author:

dd32

Message:

Slack: Use hahs_equals() when comparing webhook tokens.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/slack/trac-bot.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/slack/trac-bot.php

@@ -12 +12 @@
 
     // Verify it came from Slack.
-    if ( ! isset( $_GET['token'] ) || $_GET['token'] !== URL_SECRET__TRAC_BOT ) {
+    if ( ! hash_equals( URL_SECRET__TRAC_BOT, $_GET['token'] ?? '' ) ) {
         return;
     }