GitLab

Issue #3118581 by kiamlaluno: The documentation for Crypt::randomBytesBase64() is wrong about the output length

(cherry picked from commit d2d8fc93)
(cherry picked from commit 192a49e9)

Issue #3118186 by swatichouhan012: Incorrect link for deprecated randomBytes() method description in utility component

(cherry picked from commit 0f860c98)

Issue #3048498 by jonathan1055, Lendude, naveenvalecha, klausi, alexpott, Gábor Hojtsy: [≈Nov. 11] Fix Drupal.Commenting.Deprecated coding standard

(cherry picked from commit 2a009c5e)

Issue #3053956 by alexpott, neeravbm, aleevas, voleger, Berdir: Deprecate \Drupal\Component\Utility\Crypt::hashEquals() in favour of PHP's builtin hash_equals()

Issue #3054311 by alexpott: Deprecate \Drupal\Component\Utility\Crypt::randomBytes() in favour of PHP's builtin random_bytes()

Issue #3053363 by alexpott, Wim Leers, Berdir, mondrake, xjm: Remove support for PHP 5 in Drupal 8.8

Issue #2763787 by pwolanin, nerdstein, rlhawk, YesCT, slasher13, tuutti, alexpott, therealssj, TravisCarden, dawehner, maximpodorov, klausi, catch, talhaparacha, Eric_A: Upgrade random_compat to latest version

Issue #2752533 by mikeker: \Drupal\Component\Utility\Crypt::randomBytesBase64 docblock refers to $byte_count instead of $count

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2550519 by klausi, nullkernel, cweagans, alexpott, pwolanin, neclimdul: Crypt::randomBytes() doesn't actually return cryptographically secure random bytes

Issue #2400197 by pwolanin, fgm, znerol, neclimdul, mpdonadio, thekevinday, Fabianx: Harden the security where hash values are compared

Issue #2079863 by filijonka, mrsinguyen, fabricebernhard, Chernous_dn, YesCT: Remove Unused local variable from /core/lib/Drupal/Component Utility/Crypt.php  Transliteration/PHPTransliteration.php  Utility/UserAgent.php  Gettext/PoHeader.php.

Issue #2140433 by pwolanin, chx, Owen Barton, dstol, Heine, Damien Tournoud: Port SA-CORE-2013-003 to Drupal 8.

Issue #2145881 by damiankloip, alexpott: Remove string casting from Crypt::hmacBase64(). Throw exceptions instead.

Issue #2141041 by Heine, klausi, David_Rothstein, amateescu, tim.plunkett, : CsrfTokenGenerator::validate() should do an identical compare. (CORE-SA-2013-003 follow-up)

Issue #2049167 by jbrown: Fixed Don't use function_exists() on functions that are built into PHP 5.3.