From 0246f478882c26bc1fe293224653074cd46a90d0 Mon Sep 17 00:00:00 2001 From: SaJH Date: Fri, 22 Aug 2025 15:32:09 +0200 Subject: Fixed #36546 -- Deprecated django.utils.crypto.constant_time_compare() in favor of hmac.compare_digest(). Signed-off-by: SaJH --- docs/internals/deprecation.txt | 2 ++ docs/releases/6.0.txt | 3 +++ 2 files changed, 5 insertions(+) (limited to 'docs') diff --git a/docs/internals/deprecation.txt b/docs/internals/deprecation.txt index 0e2a7ffb36..43c78ca041 100644 --- a/docs/internals/deprecation.txt +++ b/docs/internals/deprecation.txt @@ -53,6 +53,8 @@ details on these changes. * The ``django.core.mail.forbid_multi_line_headers()`` and ``django.core.mail.message.sanitize_address()`` functions will be removed. +* The ``django.utils.crypto.constant_time_compare()`` function will be removed. + .. _deprecation-removed-in-6.1: 6.1 diff --git a/docs/releases/6.0.txt b/docs/releases/6.0.txt index e54b9788ce..f131ac7c0d 100644 --- a/docs/releases/6.0.txt +++ b/docs/releases/6.0.txt @@ -570,6 +570,9 @@ Miscellaneous * The undocumented ``django.core.mail.forbid_multi_line_headers()`` and ``django.core.mail.message.sanitize_address()`` functions are deprecated. +* The ``django.utils.crypto.constant_time_compare()`` function is deprecated + because it is merely an alias of :py:func:`hmac.compare_digest`. + Features removed in 6.0 ======================= -- cgit v1.3