user 427ee1e820 fix: use timing-safe comparison for OPER credentials ...

Replace plain != string comparison with crypto/subtle.ConstantTimeCompare
for both operator name and password checks in handleOper to prevent
timing-based side-channel attacks.

Closes review feedback on PR #82.

2026-03-17 11:57:29 -07:00

..

api_test.go

feat: add OPER command and oper-only WHOIS client info

2026-03-17 10:48:04 -07:00

api.go

fix: use timing-safe comparison for OPER credentials

2026-03-17 11:57:29 -07:00

auth.go

add IP to sessions, IP+hostname to clients

2026-03-17 08:52:50 -07:00

handlers.go

feat: add runtime statistics to healthcheck endpoint (#80)

2026-03-17 12:43:39 +01:00

healthcheck.go

feat: add runtime statistics to healthcheck endpoint (#80)

2026-03-17 12:43:39 +01:00