This repository has been archived by the owner on Jan 19, 2020. It is now read-only.

Fix X-Hub-Signature Exploit #74

Open

jcampbell05 opened this issue Nov 10, 2016 · 1 comment

Labels

bug

Collaborator

jcampbell05 commented Nov 10, 2016 •

edited

Loading

https://chatbotsmagazine.com/how-to-kill-a-bot-with-10-http-requests-ca7eb57c2ad1#.j685u0tdj

Implement https://github.com/alexcurtis/express-x-hub into clients and consider implementing #36

jcampbell05 added the bug label

davidmann4 commented Jan 5, 2017

Also make sure to use a constant time algorithm to compare the two values to avoid potential timing attacks.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.