Mercurial > openid
log
age | author | description |
---|---|---|
Sun, 03 Jul 2011 17:52:29 -0400 | Adam Chlipala | Based on a security suggestion by Robin Green, start a new session after authentication at an OP and after submission of a signup form |
Sun, 03 Jul 2011 16:40:55 -0400 | Adam Chlipala | Don't redirect back to URLs that have query strings |
Sun, 03 Jul 2011 14:09:03 -0400 | Adam Chlipala | Fix type error |
Sat, 02 Jul 2011 20:34:26 +0100 | Robin Green | Secure HMAC comparison |
Sun, 12 Jun 2011 18:12:47 -0400 | Adam Chlipala | Announce when provider only supports old OpenID version |
Sun, 12 Jun 2011 17:49:43 -0400 | Adam Chlipala | Fix OpenSSL memory leak (spotted by Chris Double) |
Sun, 12 Jun 2011 17:16:30 -0400 | Adam Chlipala | Tell libcurl to use SSLv3 |