hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update TimingAttackAgainstHeader.qhelp

Browse Source
This commit is contained in:
ahmed532009
2022-02-10 19:15:43 +01:00
committed by Chris Smowton
parent 98b06d35af
commit c6c67b907b
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp
View File

@@ -21,7 +21,6 @@ and does not depend on the contents of the arrays.
<p>
The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
This method implements a non-constant-time algorithm.
Both the message and the signature come from an untrusted HTTP request:
</p>
<sample src="UnsafecsrfComparison.java" />
</qhelp>