@@ -0,0 +1,743 @@
+import javax.servlet.http.HttpServletRequest;%0Aimport java.nio.charset.StandardCharsets;%0Aimport java.security.MessageDigest;%0A%0A%0Aprivate boolean UnsafecsrfComparison(String csrfTokenInCookie) %7B%0A         if(csrfTokenInCookie == null %7C%7C !csrfTokenInCookie.equals(request.getHeader(%22X-CSRF-TOKEN%22))) %7B // BAD%0A                 return false;%0A         %7D%0A%7D%0A%0A%0Aprivate boolean safecsrfComparison(String csrfTokenInCookie) %7B%0A%09  String csrfTokenInRequest = request.getHeader(%22X-CSRF-TOKEN%22);%0A          if (csrfTokenInRequest == null %7C%7C !MessageDigest.isEqual(%0A                csrfTokenInCookie.getBytes(StandardCharsets.UTF_8), %0A                csrfTokenInRequest.getBytes(StandardCharsets.UTF_8))) %7B // GOOD%0A                     return false;%0A         %7D%0A%7D%0A

Create ComparingValueOfSensetiveHeader.java