fix(utils): use hmac.compare_digest for secure WebApp signature validation (#1710)

mirror of https://github.com/aiogram/aiogram.git synced 2025-12-06 07:50:32 +00:00
2025-12-06 07:50:32 +00:00 · 2025-07-19 16:17:27 +05:00 · 2025-07-19 16:17:27 +05:00 · ddcedadfbd
commit ddcedadfbd
parent 7a517f1eba
2 changed files with 2 additions and 1 deletions
--- a/CHANGES/1709.bugfix.rst
+++ b/CHANGES/1709.bugfix.rst
@ -0,0 +1 @@
+Use `hmac.compare_digest` for validating WebApp data to prevent timing attacks.
				`@ -0,0 +1 @@`
				Use `hmac.compare_digest` for validating WebApp data to prevent timing attacks.