summary history branches tags files
commit:d58a7e3316ce14d165ea4afac58d13f6cc2acdd5
author:Trevor Bentley
committer:Trevor Bentley
date:Thu Jan 26 01:27:32 2023 +0100
parents:1403cdce988e7a77166d48ab06dc86d4690746b8
fix small typos in README
diff --git a/README.md b/README.md
line changes: +2/-2
index 183ab74..f7726b8
--- a/README.md
+++ b/README.md
@@ -168,9 +168,9 @@ Tera templates support custom functions and filters, and Itsy-Gitsy defines a fe
 
 ## Security
 
-Security is, for the most part, outsourced to the libraries Itsy-Gitsy depends on.  [git2](https://github.com/rust-lang/git2-rs) handles the security of Git repo access, [Tera](https://tera.netlify.app/) and the templates files themselves handle sanitizing HTML outputs, [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) handles sanitizing Markdown output, and [syntect](https://github.com/trishume/syntect) handles sanitizing syntax highlighted file contents.  If any of these libraries contain security issues, then so does Itsy Gitsy.
+Security is, for the most part, outsourced to the libraries Itsy-Gitsy depends on.  [git2](https://github.com/rust-lang/git2-rs) handles the security of Git repo access, [Tera](https://tera.netlify.app/) and the templates files themselves handle sanitizing HTML outputs, [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) handles sanitizing Markdown output, and [syntect](https://github.com/trishume/syntect) handles sanitizing syntax highlighted file contents.  If any of these libraries contain security issues, then so does Itsy-Gitsy.
 
-The main thing Itsy-Gitsy itself is responsible for is ensuring it only writes files to its output directory.  It has some basic protections against obvious attempts to write outside of the output subdirectory, but nothing invinsible.
+The main thing Itsy-Gitsy itself is responsible for is ensuring it only writes files to its output directory.  It has some basic protections against obvious attempts to write outside of the output subdirectory, but nothing invincible.
 
 As always, if security is a concern, best practice is to follow the rules of least-privilege.  Run Itsy-Gitsy under a dedicated, low-privilege user account against Git repositories with read-only or no upstream access.  For maximum paranoia, disable syntax highlighting and Markdown rendering, and use filesystem namespaces to restrict it to read-only access of Git repositories and read-write access to the output directory.