diff --git a/spec/README.md b/spec/README.md index 2c20af3..4685815 100644 --- a/spec/README.md +++ b/spec/README.md @@ -77,7 +77,7 @@ but sorely lacking in the vast majority of them. ### Why not CGI? * CGI is also **rigid** about how it matches HTTP and UNIX® process - concepts. Notably CGI *meta-variables* are injected into the script's + concepts. Notably, CGI *meta-variables* are injected into the script's environment; this behavior can and has been exploited by nasty attacks such as [Shellshock](https://en.wikipedia.org/wiki/Shellshock_(software_bug)). * Trying to leverage CGI from a shell script could be less cumbersome in some