Use Rack::Utils.secure_compare to compare CSRF tokens
Use Rack::Utils.secure_compare to compare CSRF tokens

While network timing attacks are not trivial,
using secure_compare will ensure they can't
happen.

gfvcastro/lotus,lucasallan/lotus,benlovell/lotus,AlfonsoUceda/lotus,lucasallan/lotus,hanami/hanami,cllns/hanami,lotus/lotus,lotus/lotus,gfvcastro/lotus,theocodes/lotus,lotus/lotus,fewtaeyeon/hanami,deepj/lotus,benlovell/lotus,hanami/hanami,gfvcastro/lotus,AlfonsoUceda/lotus,fewtaeyeon/hanami,deepj/lotus,lucasallan/lotus,fewtaeyeon/hanami,cllns/hanami,benlovell/lotus,cllns/hanami,AlfonsoUceda/lotus,theocodes/lotus