security: Fix timing attack vulnerability in credential comparison (#1014)

Co-authored-by: Copilot AI <copilot@github.com>
2026-08-20 11:32:19 +00:00 · 2025-12-06 15:13:27 +08:00
parent 6ca8945ca7
commit 72930b1e30
7 changed files with 65 additions and 12 deletions
@@ -152,6 +152,7 @@ rustls-pemfile = "2.2.0"
 rustls-pki-types = "1.13.1"
 sha1 = "0.11.0-rc.3"
 sha2 = "0.11.0-rc.3"
+subtle = "2.6"
 zeroize = { version = "1.8.2", features = ["derive"] }

 # Time and Date