da1bba2e6b0786ed0596cedd2ae385e511a6f205
resolveIdentity and verifyOperatorKey compared the shared relay_cloud_operator_key with ===/!==, which short-circuits on the first differing byte — a timing oracle on a high-value key. Use a timingSafeEqual-based constantTimeEqual, matching admin-auth.js.
Description
No description provided
Languages
JavaScript
58.2%
HTML
23.6%
TypeScript
17%
Shell
0.7%
Makefile
0.3%
Other
0.2%