invidious/src
leonklingele 0d536d11e3
Verify token signature in constant time, Run cheap checks first in token validation process (#1032)
* Verify token signature in constant time

To prevent timing side channel attacks

* Run cheap checks first in token validation process

Expensive checks such as the nonce lookup on the database or the
signature check can be run after cheap/fast checks.
2020-03-02 10:04:36 -06:00
..
invidious Verify token signature in constant time, Run cheap checks first in token validation process (#1032) 2020-03-02 10:04:36 -06:00
invidious.cr Sanitize PLID 2020-02-28 14:10:01 -05:00