Skip to content

Commit 1f79d9d

Browse files
committed
minor #5619 Remove a caution note about StringUtils::equals() which is no longer true (javiereguiluz)
This PR was merged into the 2.3 branch. Discussion ---------- Remove a caution note about StringUtils::equals() which is no longer true | Q | A | ------------- | --- | Doc fix? | yes | New docs? | no | Applies to | all | Fixed tickets | #5618 Commits ------- d0f1a4e Remove a cauion note about StringUtils::equals() which is no longer true
2 parents 0888d78 + d0f1a4e commit 1f79d9d

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

components/security/secure_tools.rst

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,6 @@ algorithm; you can use the same strategy in your own code thanks to the
2121
// is some known string (e.g. password) equal to some user input?
2222
$bool = StringUtils::equals($knownString, $userInput);
2323

24-
.. caution::
25-
26-
To avoid timing attacks, the known string must be the first argument
27-
and the user-entered string the second.
28-
2924
Generating a Secure random Number
3025
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3126

0 commit comments

Comments
 (0)