| @@ -33,9 +33,9 @@ | ||
| 33 | 33 | } |
| 34 | 34 | |
| 35 | 35 | if ( isset( $attributes['instance']['encoded'], $attributes['instance']['hash'] ) ) { |
| 36 | 36 | $serialized_instance = base64_decode( $attributes['instance']['encoded'] ); |
| 37 | - if ( wp_hash( $serialized_instance ) !== $attributes['instance']['hash'] ) { | |
| 37 | + if ( ! hash_equals( wp_hash( $serialized_instance ), (string) $attributes['instance']['hash'] ) ) { | |
| 38 | 38 | return ''; |
| 39 | 39 | } |
| 40 | 40 | $instance = unserialize( $serialized_instance ); |
| 41 | 41 | } else { |
