New corrections

2024-08-27 09:06:13 +01:00
parent b30c120e57
commit a3b2b63ea1
1 changed files with 49 additions and 1 deletions
@@ -18,4 +18,52 @@ contains the TypeScript compiler.

 (Thanks to Cesar Rodriguez Olvera for reporting this problem)

---
+---
+
+**Chapter 5**
+
+On page 132, this sentence in the description of HTTP Strict Transport Security:
+
+>The HTTP Strict Transport Security (HSTS) header can 
+be used to tell browsers **not** to only use HTTPS requests for a domain
+
+should be:
+
+>The HTTP Strict Transport Security (HSTS) header can 
+be used to tell browsers to only use HTTPS requests for a domain
+
+---
+
+**Chapter 6**
+
+On page 146, this sentence:
+
+>In this chapter, I will continue to use the webapp project created in Chapter 4 and modified in 
+Chapter 3.
+
+should be:
+
+In this chapter, I will continue to use the webapp project created in Chapter 4 and modified in 
+Chapter **5**.
+
+---
+
+**Chapter 7**
+
+On page 182, this sentence:
+
+>In this chapter, I deliberately create an XSS vulnerability in the example application, demonstrate 
+how it can be exploited, and then use a content security browser to provide the browser with the 
+information it needs to stop the application from being abused.
+
+should be:
+
+>In this chapter, I deliberately create an XSS vulnerability in the example application, demonstrate 
+how it can be exploited, and then use a content security **policy** to provide the browser with the 
+information it needs to stop the application from being abused.
+
+---
+
+
+
+