Skip to content

Commit 8e6f76d

Browse files
ahmed-farid-devsmowton
authored andcommitted
Update TimingAttackAgainstHeader.qhelp
1 parent fa8af6b commit 8e6f76d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ and does not depend on the contents of the arrays.
1919
</recommendation>
2020
<example>
2121
<p>
22-
The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
22+
The following example uses <code>String.equals()</code> method for validating a csrf token.
2323
This method implements a non-constant-time algorithm. The example also demonstrates validation using a safe constant-time algorithm.
2424
</p>
2525
<sample src="ComparingValueOfSensetiveHeader.java" />

0 commit comments

Comments
 (0)