Comment 4 for bug 1459483

Revision history for this message
Dolph Mathews (dolph) wrote : Re: able to validate a Fernet token with garbage at the end

I'm also marking this as Medium because I'm unsure of any negative impact (much less a security impact) beyond passing the same invalid token back to the client in the JSON response (... which can still be validated successfully).