We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4a9ee58 commit f758ed0Copy full SHA for f758ed0
java/ql/src/experimental/Security/CWE/CWE-208/ComparingValueOfSensetiveHeader.java
@@ -2,7 +2,6 @@
2
import java.nio.charset.StandardCharsets;
3
import java.security.MessageDigest;
4
5
-
6
private boolean UnsafecsrfComparison(String csrfTokenInCookie) {
7
if(csrfTokenInCookie == null || !csrfTokenInCookie.equals(request.getHeader("X-CSRF-TOKEN"))) { // BAD
8
return false;
0 commit comments