cakephp/cakephp — pull request #3382 by php-engineer (2014-04-23 19:28:40+00:00)
Title: update Utility/Security.php

This way a misconfiguration of Security::hash() through $salt => true is impossible.