79456357

Date: 2025-02-21 04:45:38
Score: 1
Natty:
Report link

As mentioned on the Rust discord, you are not parsing the svix-signature header to compare the actual signatures. There is additional metadata in the header.

Also please note that you should use constant-time comparison functions for verifying the hash to prevent timing attacks.

Reasons:
  • Low length (0.5):
  • Has code block (-0.5):
  • Low reputation (1):
Posted by: pwoolford