From 9b0b2dd6888e847148c129c05ffe53f4f4885d80 Mon Sep 17 00:00:00 2001 From: bjarkler Date: Thu, 14 Jan 2021 18:28:12 +0000 Subject: [PATCH] docs: Fix typo in Trusted Types documentation (#40433) Remove an extraneous 'd' from the Trusted Types header. PR Close #40433 --- aio/content/guide/security.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/aio/content/guide/security.md b/aio/content/guide/security.md index 47f6fe3222..defc6a200a 100644 --- a/aio/content/guide/security.md +++ b/aio/content/guide/security.md @@ -199,7 +199,7 @@ You should configure the HTTP headers for Trusted Types in the following locatio The following is an example of a header specifically configured for Trusted Types and Angular: -Content-Security-Policy: trusted-types angular; required-trusted-types-for 'script'; +Content-Security-Policy: trusted-types angular; require-trusted-types-for 'script'; The following is an example of a header specifically configured for Trusted Types and Angular applications that use any of the methods in Angular's [DomSanitizer](api/platform-browser/DomSanitizer) that bypasses security. @@ -309,4 +309,4 @@ post](https://security.googleblog.com/2011/05/website-security-for-webmasters.ht Angular applications must follow the same security principles as regular web applications, and must be audited as such. Angular-specific APIs that should be audited in a security review, such as the [_bypassSecurityTrust_](guide/security#bypass-security-apis) methods, are marked in the documentation -as security sensitive. \ No newline at end of file +as security sensitive.