Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit fa81f43

Browse files
ahmed-farid-devsmowton
ahmed-farid-dev
authored and
smowton
committed
Update TimingAttackAgainstHeader.qhelp
1 parent 39e07cb commit fa81f43

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

‎java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.qhelp‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,9 @@ and does not depend on the contents of the arrays.
2121
<p>
2222
The following example uses <code>Arrays.equals()</code> method for validating a csrf token.
2323
This method implements a non-constant-time algorithm.
24+
25+
In the same example i use a safe constant-time algorithm for validating.
2426
</p>
25-
<sample src="UnsafecsrfComparison.java" />
27+
<sample src="csrfComparison.java" />
2628
</qhelp>
2729

0 commit comments

Comments
 (0)