Update TimingAttackAgainstHeader.ql

ahmed-farid-dev · smowton · commit 308f86f66fc8 · 2022-02-25T17:33:07.000Z
diff --git a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql
@@ -58,7 +58,7 @@ class ClientSuppliedIpTokenCheck extends DataFlow::Node {
 }
 
 class NonConstantTimeComparisonConfig extends TaintTracking::Configuration {
-  NonConstantTimeComparisonConfig() { this = "NonConstantTimeCryptoComparisonConfig" }
+  NonConstantTimeComparisonConfig() { this = "NonConstantTimeComparisonConfig" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof ClientSuppliedIpTokenCheck }
 

Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,7 @@ class ClientSuppliedIpTokenCheck extends DataFlow::Node {`
`58`	`58`	`}`
`59`	`59`
`60`	`60`	`class NonConstantTimeComparisonConfig extends TaintTracking::Configuration {`
`61`		`- NonConstantTimeComparisonConfig() { this = "NonConstantTimeCryptoComparisonConfig" }`
	`61`	`+ NonConstantTimeComparisonConfig() { this = "NonConstantTimeComparisonConfig" }`
`62`	`62`
`63`	`63`	`override predicate isSource(DataFlow::Node source) { source instanceof ClientSuppliedIpTokenCheck }`
`64`	`64`