From 4ad417937aed25eda3575b464b99c60243c8630b Mon Sep 17 00:00:00 2001 From: Benjamin Forster <12589522+e-e-e@users.noreply.github.com> Date: Thu, 11 Nov 2021 13:22:44 +1100 Subject: [PATCH] docs: Change 'his' to gender neutral term 'their' --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 17a51c91..4aa5a41c 100644 --- a/README.md +++ b/README.md @@ -919,7 +919,7 @@ Also known as correlation id / transit id / tracing id / request id / request co **TL;DR:** There is a common scenario where Node.js runs as a root user with unlimited permissions. For example, this is the default behaviour in Docker containers. It's recommended to create a non-root user and either bake it into the Docker image (examples given below) or run the process on this user's behalf by invoking the container with the flag "-u username" -**Otherwise:** An attacker who manages to run a script on the server gets unlimited power over the local machine (e.g. change iptable and re-route traffic to his server) +**Otherwise:** An attacker who manages to run a script on the server gets unlimited power over the local machine (e.g. change iptable and re-route traffic to their server) 🔗 [**Read More: Run Node.js as non-root user**](./sections/security/non-root-user.md)