summaryrefslogtreecommitdiffstats
path: root/Http/Firewall
diff options
context:
space:
mode:
authorFabien Potencier <fabien.potencier@gmail.com>2015-11-23 11:39:33 +0100
committerFabien Potencier <fabien.potencier@gmail.com>2015-11-23 11:39:33 +0100
commit37c3a16866afab076aa9be28696b779f91a48fd3 (patch)
treea4026aa9e65c279abbf472bef130219a2c82a69c /Http/Firewall
parent31c5b697c06a1f254ec337c1921b9f6b25b8f32f (diff)
downloadsymfony-security-37c3a16866afab076aa9be28696b779f91a48fd3.zip
symfony-security-37c3a16866afab076aa9be28696b779f91a48fd3.tar.gz
symfony-security-37c3a16866afab076aa9be28696b779f91a48fd3.tar.bz2
removed usage of the deprecated StringUtils::equals() method
Diffstat (limited to 'Http/Firewall')
-rw-r--r--Http/Firewall/DigestAuthenticationListener.php3
1 files changed, 1 insertions, 2 deletions
diff --git a/Http/Firewall/DigestAuthenticationListener.php b/Http/Firewall/DigestAuthenticationListener.php
index f2048fd..41e5d6d 100644
--- a/Http/Firewall/DigestAuthenticationListener.php
+++ b/Http/Firewall/DigestAuthenticationListener.php
@@ -12,7 +12,6 @@
namespace Symfony\Component\Security\Http\Firewall;
use Symfony\Component\Security\Core\User\UserProviderInterface;
-use Symfony\Component\Security\Core\Util\StringUtils;
use Symfony\Component\Security\Http\EntryPoint\DigestAuthenticationEntryPoint;
use Psr\Log\LoggerInterface;
use Symfony\Component\HttpKernel\Event\GetResponseEvent;
@@ -100,7 +99,7 @@ class DigestAuthenticationListener implements ListenerInterface
return;
}
- if (!StringUtils::equals($serverDigestMd5, $digestAuth->getResponse())) {
+ if (!hash_equals($serverDigestMd5, $digestAuth->getResponse())) {
if (null !== $this->logger) {
$this->logger->debug('Unexpected response from the DigestAuth received; is the header returning a clear text passwords?', array('expected' => $serverDigestMd5, 'received' => $digestAuth->getResponse()));
}