diff --git a/lib/oauth/signature/base.rb b/lib/oauth/signature/base.rb index 9110e464..e44f59a1 100644 --- a/lib/oauth/signature/base.rb +++ b/lib/oauth/signature/base.rb @@ -51,7 +51,9 @@ def signature end def ==(cmp_signature) - signature == cmp_signature + check = signature.bytesize ^ cmp_signature.bytesize + signature.bytes.zip(cmp_signature.bytes) { |x, y| check |= x ^ y.to_i } + check.zero? end def verify