WordPress/Security-White-Paper

Ambiguous sentence

JDGrimes opened this issue · 1 comments

Under the A2 - Broken Authentication and Session Management heading is this:

WordPress core software manages user accounts and authentication and details such as the user ID, name, and password are managed on the server-side, as well as the authentication cookies.

I think it is intended to mean this:

WordPress core software manages user accounts and authentication**,** and details such as the user ID, name, and password are managed on the server-side, as as are the authentication cookies.

But it could also mean this:

WordPress core software manages user accounts and authentication and details such as the user ID, name, and password on the server-side, as well as the authentication cookies.

JJJ commented

I'd prefer this to say:

WordPress core software manages user accounts and authentication, with details such as ID, name, and password on the server-side, and authentication cookies on the client-side.