Skip to content

Commit 59475ba

Browse files
authored
Merge pull request #591 from jpuckett-di/patch-1
doc fix typos
2 parents cadabb7 + 3305ba9 commit 59475ba

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -191,14 +191,14 @@ a trusted and expected URL.
191191
Read more about Open Redirect [CWE-601](https://cwe.mitre.org/data/definitions/601.html).
192192

193193

194-
### Avoiding Reply attacks ###
194+
### Avoiding Replay attacks ###
195195

196-
A reply attack is basically try to reuse an intercepted valid SAML Message in order to impersonate a SAML action (SSO or SLO).
196+
A replay attack is basically try to reuse an intercepted valid SAML Message in order to impersonate a SAML action (SSO or SLO).
197197

198198
SAML Messages have a limited timelife (NotBefore, NotOnOrAfter) that
199199
make harder this kind of attacks, but they are still possible.
200200

201-
In order to avoid them, the SP can keep a list of SAML Messages or Assertion IDs alredy valdidated and processed. Those values only need
201+
In order to avoid them, the SP can keep a list of SAML Messages or Assertion IDs alredy validated and processed. Those values only need
202202
to be stored the amount of time of the SAML Message life time, so
203203
we don't need to store all processed message/assertion Ids, but the most recent ones.
204204

0 commit comments

Comments
 (0)