[hono] Hono added timing comparison hardening in basicAuth and bearerAuth

**[hono] Hono added timing comparison hardening in basicAuth and bearerAuth**

Summary The basicAuth and bearerAuth middlewares previously used a comparison that was not fully timing-safe. The timingSafeEqual function used normal string equality (===) when comparing hash values. This comparison may stop early if values differ, which can theoretically cause small timing differences. The implementation has been updated to use a safer comparison method. Details The issue was caused by the use of normal string equality (===) when comparing hash values inside the timingSafeEqual function...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.