mirrors/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2025-10-29 04:32:25 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

remove cookie length check , constant time compare handles this

Browse source
This commit is contained in:
kim 2025-04-23 12:53:36 +01:00
commit bfd4d5ab18
1 changed files with 0 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
internal/middleware/nollamas.go
View file

@ -125,14 +125,6 @@ func (m *nollamas) Serve(c *gin.Context) {
// Check for a provided success token.
cookie, _ := c.Cookie("gts-nollamas")
if len(cookie) > encodedHashLen {
// Clearly invalid cookie, just
// present them with new challenge.
l.Warn("invalid cookie provided")
m.renderChallenge(c, challenge)
return
}
// Check whether passed cookie
// is the expected success token.