Commit 78a3503
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -126,7 +126,7 @@ lead to a loss of confidentiality, integrity, or availability. | |||
| 126 | 126 | See <https://nodejs.org/api/modules.html#all-together>. | |
| 127 | 127 | ||
| 128 | 128 | Any unexpected behavior from the data manipulation from Node.js Internal | |
| 129 | - functions may be considered a vulnerability if they are expoitable via | ||
| 129 | + functions may be considered a vulnerability if they are exploitable via | ||
| 130 | 130 | untrusted resources. | |
| 131 | 131 | ||
| 132 | 132 | In addition to addressing vulnerabilities based on the above, the project works | |
@@ -144,7 +144,7 @@ the community they pose. | |||
| 144 | 144 | #### Improper Certificate Validation (CWE-295) | |
| 145 | 145 | ||
| 146 | 146 | * Node.js provides APIs to validate handling of Subject Alternative Names (SANs) | |
| 147 | - in certficates used to connect to a TLS/SSL endpoint. If certificates can be | ||
| 147 | + in certificates used to connect to a TLS/SSL endpoint. If certificates can be | ||
| 148 | 148 | crafted which result in incorrect validation by the Node.js APIs that is | |
| 149 | 149 | considered a vulnerability. | |
| 150 | 150 | ||
0 commit comments