Skip to content

Conversation

@wouterj
Copy link
Member

@wouterj wouterj commented Feb 6, 2016

Q A
doc fix? yes
new docs? yes
applies to 2.3+
Fixed tickets -

We've merged #6104 in the 2.3 branch, so I think we should use the hash_equals function the 2.3 docs as well. Now, this article isn't related to the Security component at all and it might be a good start for the Polyfill component.


.. note::

All functions described in this article were introduced in PHP 7. For older
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hash_equals() was introduced in PHP 5.6.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

@wouterj wouterj force-pushed the secure_tools-hash-equas branch from ae24142 to 9f7f1dd Compare February 7, 2016 10:51
@xabbuh
Copy link
Member

xabbuh commented Feb 7, 2016

Thank you Wouter.

@xabbuh xabbuh merged commit 9f7f1dd into symfony:2.3 Feb 7, 2016
xabbuh added a commit that referenced this pull request Feb 7, 2016
This PR was merged into the 2.3 branch.

Discussion
----------

Use hash_equals instead of StringUtils::equals

| Q | A
| --- | ---
| doc fix? | yes
| new docs? | yes
| applies to | 2.3+
| Fixed tickets | -

We've merged #6104 in the 2.3 branch, so I think we should use the `hash_equals` function the 2.3 docs as well. Now, this article isn't related to the Security component at all and it might be a good start for the Polyfill component.

Commits
-------

9f7f1dd Use hash_equals instead of StringUtils::equals

The functions described in this article were introduced in PHP 5.6 or 7.
For older PHP versions, a polyfill is provided by the
`Symfony Polyfill Component`_.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need a component section for the polyfills to which we can link instead where explain that you should rather install the polyfill packages you need instead of the big meta package imo (see #6052).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I agree.

@wouterj wouterj deleted the secure_tools-hash-equas branch February 7, 2016 11:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants