Change hash_equals order parameters (#221)

spatie · Aug 7, 2024 · e71006a · e71006a
1 parent 1aa2669
commit e71006a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/SignatureValidator/DefaultSignatureValidator.php b/src/SignatureValidator/DefaultSignatureValidator.php
@@ -24,6 +24,6 @@ public function isValid(Request $request, WebhookConfig $config): bool
 
         $computedSignature = hash_hmac('sha256', $request->getContent(), $signingSecret);
 
-        return hash_equals($signature, $computedSignature);
+        return hash_equals($computedSignature, $signature);
     }
 }