Use constant-time comparison for anti-csrf tokens #1307
Annotations
2 errors
Run golangci/golangci-lint-action@v4:
internal/crypto/crypto.go#L66
S1008: should use 'return subtle.ConstantTimeCompare([]byte(a), []byte(b)) == 1' instead of 'if subtle.ConstantTimeCompare([]byte(a), []byte(b)) == 1 { return true }; return false' (gosimple)
|
Run golangci/golangci-lint-action@v4
issues found
|
Loading