We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 36d2d61 commit 455306fCopy full SHA for 455306f
lib/slack/events/request.rb
@@ -1,4 +1,7 @@
1
# frozen_string_literal: true
2
+
3
+require 'openssl'
4
5
module Slack
6
module Events
7
class Request
@@ -75,12 +78,7 @@ def verify!
75
78
def secure_compare(computed_signature, signature)
76
79
return false if computed_signature.bytesize != signature.bytesize
77
80
- l = computed_signature.unpack "C#{computed_signature.bytesize}"
-
- result = 0
81
- signature.each_byte { |byte| result |= byte ^ l.shift }
82
83
- result.zero?
+ OpenSSL.fixed_length_secure_compare(computed_signature, signature)
84
end
85
86
0 commit comments