![]() Server : Apache/2 System : Linux server-15-235-50-60 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64 User : gositeme ( 1004) PHP Version : 8.2.29 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname Directory : /home/gositeme/.local/lib/code-server-4.102.2/node_modules/safe-compare/ |
/**
* @author Michael Raith
* @date 24.02.2016 12:04
*/
'use strict';
var crypto = require('crypto');
var bufferAlloc = require('buffer-alloc');
/**
* Do a constant time string comparison. Always compare the complete strings
* against each other to get a constant time. This method does not short-cut
* if the two string's length differs.
*
* @param {string} a
* @param {string} b
*
* @return {boolean}
*/
var safeCompare = function safeCompare(a, b) {
var strA = String(a);
var strB = String(b);
var lenA = strA.length;
var result = 0;
if (lenA !== strB.length) {
strB = strA;
result = 1;
}
for (var i = 0; i < lenA; i++) {
result |= (strA.charCodeAt(i) ^ strB.charCodeAt(i));
}
return result === 0;
};
/**
* Call native "crypto.timingSafeEqual" methods.
* All passed values will be converted into strings first.
*
* Runtime is always corresponding to the length of the first parameter (string
* a).
*
* @param {string} a
* @param {string} b
*
* @return {boolean}
*/
var nativeTimingSafeEqual = function nativeTimingSafeEqual(a, b) {
var strA = String(a);
var strB = String(b);
var aLen = Buffer.byteLength(strA);
var bLen = Buffer.byteLength(strB);
// Always use length of a to avoid leaking the length. Even if this is a
// false positive because one is a prefix of the other, the explicit length
// check at the end will catch that.
var bufA = bufferAlloc(aLen, 0, 'utf8');
bufA.write(strA);
var bufB = bufferAlloc(aLen, 0, 'utf8');
bufB.write(strB);
return crypto.timingSafeEqual(bufA, bufB) && aLen === bLen;
};
module.exports = (
typeof crypto.timingSafeEqual !== 'undefined' ?
nativeTimingSafeEqual :
safeCompare
);