@alexpott, yeah, scratch that. I am mixing up $token and $value in the code. ...

Contribution Date
Technology
Drupal
Contribution Project
Drupal core
Contribution Details

@alexpott, yeah, scratch that. I am mixing up $token and $value in the code. We can change the test to make sure that the code is logical and easy to read but that would imply change of behaviour and it's difficult to imagine that. It's best to not touch that in this issue.

Issue Status
Reviewed and Tested by Community
Contribution Author
hussainweb
Contribution Issue Link
\Drupal\Core\Access\CsrfTokenGenerator::validate() - ensure $token is a string before calling hash_equals()
Contribution Link
https://www.drupal.org/project/drupal/issues/3156880#comment-13824410
Files count
0
Patches count
0