We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 50b8568 commit 9e9954cCopy full SHA for 9e9954c
test/unit/CSRFTokenTest.php
@@ -58,15 +58,6 @@ public function testValidateWithoutSessionToken(): void
58
$this->assertFalse(CSRFToken::validate("any_token"));
59
}
60
61
- public function testValidateUsesConstantTimeComparison(): void
62
- {
63
- $token = CSRFToken::generate();
64
- $invalidToken = substr($token, 0, -1) . ($token[-1] === "a" ? "b" : "a");
65
- $this->assertFalse(CSRFToken::validate($invalidToken));
66
- $this->assertTrue(CSRFToken::validate($token));
67
- $this->assertTrue($_SESSION["csrf_tokens"][$token]);
68
- }
69
-
70
public function testClearRemovesToken(): void
71
{
72
CSRFToken::generate();
0 commit comments