umputun / weblist / 14124259432

81%

master: 84%

Pull #15

github

Fix timing attack vulnerabilities in authentication

- Use crypto/subtle.ConstantTimeCompare for all password and username comparisons
- Fix both web and SFTP authentication code
- Extract comparison logic to variables to satisfy line length linting

9 of 11 new or added lines in 2 files covered. (81.82%)

1272 of 1572 relevant lines covered (80.92%)

10.08 hits per line