user 427ee1e820 fix: use timing-safe comparison for OPER credentials ...

Replace plain != string comparison with crypto/subtle.ConstantTimeCompare
for both operator name and password checks in handleOper to prevent
timing-based side-channel attacks.

Closes review feedback on PR #82.

2026-03-17 11:57:29 -07:00

58 KiB

Raw Blame History

View Raw