We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent fa8af6b commit 8e6f76dCopy full SHA for 8e6f76d
java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp
@@ -19,7 +19,7 @@ and does not depend on the contents of the arrays.
19
</recommendation>
20
<example>
21
<p>
22
-The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
+The following example uses <code>String.equals()</code> method for validating a csrf token.
23
This method implements a non-constant-time algorithm. The example also demonstrates validation using a safe constant-time algorithm.
24
</p>
25
<sample src="ComparingValueOfSensetiveHeader.java" />
0 commit comments