Skip to content

VerifyHttpSignature/VerifyUserHttpSignature: Date validation accepts far-future dates#316

Merged
dansup merged 8 commits into
mainfrom
timeCheck
Jan 11, 2026
Merged

VerifyHttpSignature/VerifyUserHttpSignature: Date validation accepts far-future dates#316
dansup merged 8 commits into
mainfrom
timeCheck

Conversation

@shleeable

@shleeable shleeable commented Jan 10, 2026

Copy link
Copy Markdown
Contributor

The original code allowed for people to post into the future because the negative value of time is always less or equal to the 3600 seconds in the future.

Returns the difference in seconds between two dates.
When $absolute is false (default), returns negative values for dates in the past.
When $absolute is true, returns the absolute value of the difference.

@dansup dansup merged commit 032a43a into main Jan 11, 2026
5 of 6 checks passed
@shleeable shleeable deleted the timeCheck branch January 11, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants