fix(api): handle non-ASCII API keys in constant-time comparison - #532

Closed

seonghobae wants to merge 2 commits into

mainfrom

sentinel/fix-hmac-dos-non-ascii-15755354026012532131

Commits on Sep 5, 2026

Fix DoS vulnerability in hmac.compare_digest with non-ASCII input
seonghobae
committed
1e5d545
chore(security): keep HMAC repair local to source and tests
seonghobae
committed
5f49cbd