We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 6da9bc5 commit 4a9ee58Copy full SHA for 4a9ee58
java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp
@@ -22,6 +22,6 @@ and does not depend on the contents of the arrays.
22
The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
23
This method implements a non-constant-time algorithm. The example also demonstrates validation using a safe constant-time algorithm.
24
</p>
25
-<sample src="csrfComparison.java" />
+<sample src="ComparingValueOfSensetiveHeader.java" />
26
</qhelp>
27
0 commit comments