garden

Pylons · Oct 16, 2011 · 6e4c2d0 · 6e4c2d0
1 parent 63fceda
commit 6e4c2d0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/CHANGES.txt b/CHANGES.txt
@@ -24,6 +24,9 @@ Bug Fixes
   inappropriately when the ``tokens`` argument to remember was used.  See 
   https://github.com/Pylons/pyramid/pull/314.
 
+- The AuthTktAuthenticationPolicy did not use a timing-attack-aware string
+  comparator.  See https://github.com/Pylons/pyramid/pull/320 for more info.
+
 Backwards Incompatibilities
 ---------------------------