hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update TimingAttackAgainstHeader.qhelp

Browse Source
This commit is contained in:
Chris Smowton
2022-02-11 10:32:08 +00:00
parent fa81f43694
commit 80a2b388bf
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp
View File

@@ -20,9 +20,7 @@ and does not depend on the contents of the arrays.
<example>
<p>
The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
This method implements a non-constant-time algorithm.
In the same example i use a safe constant-time algorithm for validating.
This method implements a non-constant-time algorithm. The example also demonstrates validation using a safe constant-time algorithm.
</p>
<sample src="csrfComparison.java" />
</qhelp>