web2py/web2py — pull request #58 by mwielgoszewski (2013-01-27 17:26:58+00:00)
Title: Use constant-time compare function when comparing HMAC signatures

I noticed `compare()` provides a contant-time comparison function for comparing HMAC signatures, however was never called anywhere. This patch updates the `secure_loads()` function to use `compare()` when comparing HMAC signatures.