summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--CHANGES.txt3
1 files changed, 3 insertions, 0 deletions
diff --git a/CHANGES.txt b/CHANGES.txt
index 631ae1246..7440794ee 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -24,6 +24,9 @@ Bug Fixes
inappropriately when the ``tokens`` argument to remember was used. See
https://github.com/Pylons/pyramid/pull/314.
+- The AuthTktAuthenticationPolicy did not use a timing-attack-aware string
+ comparator. See https://github.com/Pylons/pyramid/pull/320 for more info.
+
Backwards Incompatibilities
---------------------------