mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-07-28 19:12:52 +00:00
Also use ConstantTimeCompare() to compare CSRF tokens to prevent leaking any information in how quickly we reject bad tokens. Signed-off-by: Ryan Richard <richardry@vmware.com>