coolify/app/Http/Controllers/Webhook/Gitlab.php at 162e43a7fc3bf392e0e32bca94013d5bf0b1be23

mirror of https://github.com/tiennm99/coolify.git synced 2026-04-30 10:20:32 +00:00

Files

T

Andras Bacsai 7a305fd2cd fix: prevent timing attack in GitLab webhook token validation

Replace insecure !== operator with hash_equals() for constant-time
string comparison when validating GitLab webhook tokens.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-07 15:23:48 +01:00

13 KiB

Raw Blame History

View Raw

13 KiB Raw Blame History

13 KiB

Raw Blame History