浏览代码

Fix Typo in Reference Docs

Word substitution, it's foolproof, not full proof :-)

Fixes gh-4063
Fred Cooke 9 年之前
父节点
当前提交
12173c04ee
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      docs/manual/src/docs/asciidoc/index.adoc

+ 1 - 1
docs/manual/src/docs/asciidoc/index.adoc

@@ -4089,7 +4089,7 @@ protected void configure(HttpSecurity http) throws Exception {
 
 [[headers-xss-protection]]
 ==== X-XSS-Protection
-Some browsers have built in support for filtering out https://www.owasp.org/index.php/Testing_for_Reflected_Cross_site_scripting_(OWASP-DV-001)[reflected XSS attacks]. This is by no means full proof, but does assist in XSS protection.
+Some browsers have built in support for filtering out https://www.owasp.org/index.php/Testing_for_Reflected_Cross_site_scripting_(OWASP-DV-001)[reflected XSS attacks]. This is by no means foolproof, but does assist in XSS protection.
 
 The filtering is typically enabled by default, so adding the header typically just ensures it is enabled and instructs the browser what to do when a XSS attack is detected. For example, the filter might try to change the content in the least invasive way to still render everything. At times, this type of replacement can become a http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/[XSS vulnerability in itself]. Instead, it is best to block the content rather than attempt to fix it. To do this we can add the following header: