Skip to content

Commit

Permalink
Fix grammar related to external verification methods.
Browse files Browse the repository at this point in the history
Co-authored-by: Ted Thibodeau Jr <[email protected]>
  • Loading branch information
msporny and TallTed committed Oct 19, 2024
1 parent ee6f0df commit 2e417ee
Showing 1 changed file with 9 additions and 8 deletions.
17 changes: 9 additions & 8 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -2326,16 +2326,17 @@ <h3>Retrieve Verification Method</h3>
method=], through a [=verification relationship=], that exists in a place that
is external to the [=controller document=]. As described in Section
[[[#integrity-protection-of-controllers]]], specifying a [=verification method=]
that is external to a [=controller document=] is a valid usage of this
that is external to a [=controller document=] is a valid use of this
specification. When retrieving any [=verification method=], especially when the
[=verification method=] might be cached, it is vital that the algorithm above is
used to ensure that there is a bi-directional reference from the [=controller
document=] to the [=verification method=] (via a [=verification relationship=])
and from the [=verification method=] to the [=controller document=] (via the
[=verification method=]'s `controller` property). Not ensuring this
bi-directional relationship exists can lead to security compromises where an
attacker poisons a cache by claiming control of a [=verification method=]
without the consent (that is, without a bi-directional reference) of the victim.
used to confirm that the [=controller document=] refers to the
[=verification method=] (via a [=verification relationship=])
and that the [=verification method=] refers to the [=controller document=]
(via the [=verification method=]'s `controller` property). Failure to
confirm that these reciprocal relationships exist can lead to security
compromises where an attacker poisons a cache by claiming control of a
[=verification method=] without the consent (that is, without a reciprocal
reference) of the victim.
</p>

<pre class="example nohighlight" title="Referencing an external verification method for `capabilityInvocation`">
Expand Down

0 comments on commit 2e417ee

Please sign in to comment.