From f69e4439b5d798b9b9629e711368ae3d7b65505d Mon Sep 17 00:00:00 2001 From: xMartin Date: Sat, 24 Mar 2018 15:22:34 +0100 Subject: [PATCH] fix typos in security docs --- developer_manual/general/security.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/developer_manual/general/security.rst b/developer_manual/general/security.rst index f3139c6a0..743a89379 100644 --- a/developer_manual/general/security.rst +++ b/developer_manual/general/security.rst @@ -23,7 +23,7 @@ To prevent this, always use prepared queries: $params = array(1); $result = $query->execute($params); -If the App Framework is used, write SQL queries like this in the a class that extends the Mapper: +If the App Framework is used, write SQL queries like this in a class that extends the Mapper: .. code-block:: php @@ -105,7 +105,7 @@ Clickjacking To prevent such attacks Nextcloud sends the `X-Frame-Options` header to all template responses. Don't remove this header if you don't really need it! -This is already built into Nextcloud if :php:class:`OC_Template`. +This is already built into Nextcloud in :php:class:`OC_Template`. Code executions / File inclusions --------------------------------- @@ -132,7 +132,8 @@ Code executions and file inclusions can be easily prevented by **never** allowin Directory Traversal ------------------- -Very often developers forget about sanitizing the file path (removing all \\ and /), this allows an attacker to traverse through directories on the server which opens several potential attack vendors including privilege escalations, code executions or file disclosures. + +Very often developers forget about sanitizing the file path (removing all \\ and /), this allows an attacker to traverse through directories on the server which opens several potential attack vectors including privilege escalations, code executions or file disclosures. **DON'T**