{"push_id":594407572,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"9f089ac48c22b2f7cfbc7dd0ca29da924c566363","before":"c41843af123933390b5563de88790619c73c0f14","commits":[{"sha":"9f089ac48c22b2f7cfbc7dd0ca29da924c566363","author":{"email":"f49f2a5e660787beb1d0033eaaa9f0d533955c60@higgsboson.tk","name":"Jörg Thalheim"},"message":"use constant-time string compare for internal api authentication\n\nRuby str_equal uses memcmp internally to compare String.\nMemcmp is vunerable to timing attacks because it returns early\non mismatch (on most x32 platforms memcmp uses a bytewise comparision).\nDevise.secure_compare implements a constant time comparision instead.","distinct":true,"url":"https://api.github.com/repos/Mic92/gitlabhq/commits/9f089ac48c22b2f7cfbc7dd0ca29da924c566363"}]}