diff options
| author | Andrew Lytvynov <awly@tailscale.com> | 2026-03-20 11:30:26 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-20 11:30:26 -0700 |
| commit | 34477cf3e70aac1aa3265033a46e3fe9acd5535c (patch) | |
| tree | a5b88c6e1d2ba58e6a226a5c4496acb199519ae2 /control/controlhttp/controlhttpserver | |
| parent | ffa7df2789b883b806be221161babfb4c3f53ab2 (diff) | |
| download | tailscale-34477cf3e70aac1aa3265033a46e3fe9acd5535c.tar.xz tailscale-34477cf3e70aac1aa3265033a46e3fe9acd5535c.zip | |
tka: use constant-time comparison of disablement secret (#19064)
The actual secret is passed through argon2 first, so a timing attack is
not feasible remotely, and pretty unlikely locally. Still, clean this
up.
Fixes #19063
Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions