Fossil SCM

Fix TH1 documentation typo.

drh 2025-04-24 19:25 trunk
Commit 6a0d51ded9d636d1d45ce4d8dd455383f9d80af3da883df66d982fe021900cdd
1 file changed +1 -1
+1 -1
--- www/th1.md
+++ www/th1.md
@@ -123,11 +123,11 @@
123123
strings from being used in ways that might lead to XSS or SQL-injection
124124
attacks. This feature helps to ensure that XSS and SQL-injection
125125
vulnerabilities are not *accidentally* added to Fossil when
126126
custom TH1 scripts for headers or footers or tickets are added to a
127127
repository. Note that the tainted/untainted distinction in strings does
128
-make it impossible to introduce XSS and SQL-injections vulnerabilities
128
+not make it impossible to introduce XSS and SQL-injections vulnerabilities
129129
using poorly-written TH1 scripts; it just makes it more difficult and
130130
less likely to happen by accident. Developers must still consider the
131131
security implications TH1 customizations they add to Fossil, and take
132132
appropriate precautions when writing custom TH1. Peer review of TH1
133133
script changes is encouraged.
134134
--- www/th1.md
+++ www/th1.md
@@ -123,11 +123,11 @@
123 strings from being used in ways that might lead to XSS or SQL-injection
124 attacks. This feature helps to ensure that XSS and SQL-injection
125 vulnerabilities are not *accidentally* added to Fossil when
126 custom TH1 scripts for headers or footers or tickets are added to a
127 repository. Note that the tainted/untainted distinction in strings does
128 make it impossible to introduce XSS and SQL-injections vulnerabilities
129 using poorly-written TH1 scripts; it just makes it more difficult and
130 less likely to happen by accident. Developers must still consider the
131 security implications TH1 customizations they add to Fossil, and take
132 appropriate precautions when writing custom TH1. Peer review of TH1
133 script changes is encouraged.
134
--- www/th1.md
+++ www/th1.md
@@ -123,11 +123,11 @@
123 strings from being used in ways that might lead to XSS or SQL-injection
124 attacks. This feature helps to ensure that XSS and SQL-injection
125 vulnerabilities are not *accidentally* added to Fossil when
126 custom TH1 scripts for headers or footers or tickets are added to a
127 repository. Note that the tainted/untainted distinction in strings does
128 not make it impossible to introduce XSS and SQL-injections vulnerabilities
129 using poorly-written TH1 scripts; it just makes it more difficult and
130 less likely to happen by accident. Developers must still consider the
131 security implications TH1 customizations they add to Fossil, and take
132 appropriate precautions when writing custom TH1. Peer review of TH1
133 script changes is encouraged.
134

Keyboard Shortcuts

Open search /
Next entry (timeline) j
Previous entry (timeline) k
Open focused entry Enter
Show this help ?
Toggle theme Top nav button