[java-sig-commits] [Bug 1311949] CVE-2016-0791 jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245)