krixon / multi-factor-auth / 39

100%

push

travis-ci

Add some protection around short codes being verified

Verification is done against a number of digits determined by the length
of the supplied code. Unless the client validates the code length
before verifying it, this could lead to insufficiently secure
verification since a 1 digit code would have an approximately 1 in 10
chance of being verified correctly.

This change introduces a minimum code length which is verified by the
library itself.

9 of 9 new or added lines in 1 file covered. (100.0%)

399 of 399 relevant lines covered (100.0%)

38.4 hits per line