symfony/symfony — pull request #6510 by ircmaxell (2012-12-29 12:51:33+00:00)
Title: Improve timing safe comparison function in Security bundle to not leak length information.

Improve the timing safe comparison function to better handle cases where input is of different length.

Note that it is now important to always pass any string that the user can directly control to the second parameter of the function. Otherwise, length information may be leaked.