diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-04-08 06:09:31 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-04-08 06:09:31 +0300 |
| commit | e2ee1eec50aa8df8543d7ecc585ec0ba5ee544ac (patch) | |
| tree | 7998650d27ada12ee7d06a21cbb3b5e89f298378 /doc/security | |
| parent | 060c842402c00f830a810702600cbe39dfa6cf62 (diff) | |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/security')
| -rw-r--r-- | doc/security/crime_vulnerability.md | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/doc/security/crime_vulnerability.md b/doc/security/crime_vulnerability.md index 23ee60ab930..93edbc69eb0 100644 --- a/doc/security/crime_vulnerability.md +++ b/doc/security/crime_vulnerability.md @@ -4,12 +4,11 @@ type: reference # How we manage the TLS protocol CRIME vulnerability -> CRIME ("Compression Ratio Info-leak Made Easy") is a security exploit against +[CRIME](https://en.wikipedia.org/w/index.php?title=CRIME&oldid=692423806) is a security exploit against secret web cookies over connections using the HTTPS and SPDY protocols that also use data compression. When used to recover the content of secret authentication cookies, it allows an attacker to perform session hijacking on an authenticated web session, allowing the launching of further attacks. -([CRIME](https://en.wikipedia.org/w/index.php?title=CRIME&oldid=692423806)) ## Description |