diff options
Diffstat (limited to 'system/core')
-rw-r--r-- | system/core/Common.php | 2 | ||||
-rw-r--r-- | system/core/Security.php | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/system/core/Common.php b/system/core/Common.php index d3ffaf0cd..2712df0e4 100644 --- a/system/core/Common.php +++ b/system/core/Common.php @@ -826,7 +826,7 @@ if ( ! function_exists('function_usable')) * terminate script execution if a disabled function is executed. * * The above described behavior turned out to be a bug in Suhosin, - * but even though a fix was commited for 0.9.34 on 2012-02-12, + * but even though a fix was committed for 0.9.34 on 2012-02-12, * that version is yet to be released. This function will therefore * be just temporary, but would probably be kept for a few years. * diff --git a/system/core/Security.php b/system/core/Security.php index 1c398632d..4ad550fff 100644 --- a/system/core/Security.php +++ b/system/core/Security.php @@ -847,7 +847,7 @@ class CI_Security { // Each iteration filters a single attribute do { - // Strip any non-alpha characters that may preceed an attribute. + // Strip any non-alpha characters that may precede an attribute. // Browsers often parse these incorrectly and that has been a // of numerous XSS issues we've had. $matches['attributes'] = preg_replace('#^[^a-z]+#i', '', $matches['attributes']); |