Skip to content

Commit 461cfb6

Browse files
committed
fixup! remind why this is important
Signed-off-by: Aditya Sirish <aditya@saky.in>
1 parent 5b6279e commit 461cfb6

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

tuf-spec.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1098,11 +1098,13 @@ attributes are OPTIONAL, if used, exactly one of them should be set.
10981098
* a <a>PATHPATTERN</a> of `"foo/*"` matches `"foo/bar.tgz"` but not
10991099
`"foo/baz/bar.tgz"`, `"foo/bar/baz/bar.tgz"`, and so on.
11001100

1101-
Note: It is important to understand the functioning of path patterns to
1102-
avoid mistaken assumptions that can lead to a false sense of security. For
1103-
example, an assumption that `"foo/*"` applies recursively to all files in
1104-
subdirectories of `foo` in a terminating delegation could allow a subsequent
1105-
delegated role that should not be trusted to sign for a target.
1101+
Note: As each <PATHPATTERN> describes the paths that a delegated role is
1102+
trusted to provide, it is important to understand the functioning of path
1103+
patterns to avoid mistaken assumptions that can lead to a false sense of
1104+
security. For example, an assumption that `"foo/*"` applies recursively to
1105+
all files in subdirectories of `foo` in a terminating delegation could allow
1106+
a subsequent delegated role that should not be trusted to sign for a target
1107+
in a subdirectory of `foo`.
11061108

11071109

11081110

0 commit comments

Comments
 (0)