kohana/core — pull request #492 by sarciszewski (2014-05-13 01:17:11+00:00)
Title: 3.3/develop

Now on the correct branch!

When cryptographic hashes are compared with the `===` operator, they are susceptible to remote timing attacks. This patch affects the cookie-based session driver as well as `Security::check($token)`; you may wish to also patch other hash comparison functions.