Skip to content

Commit

Permalink
Minor improvements to guides (#5896)
Browse files Browse the repository at this point in the history
* Fix spelling of Node.js in asset management guide

* Fix typo in mix phx.gen.auth guide
  • Loading branch information
bkircher authored Aug 14, 2024
1 parent f6a04d9 commit 57846cb
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion guides/asset_management.md
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ If you need to reference other directories, you need to update the arguments abo

Phoenix's default configuration of `esbuild` (via the Elixir wrapper) does not allow you to use [esbuild plugins](https://esbuild.github.io/plugins/). If you want to use an esbuild plugin, for example to compile SASS files to CSS, you can replace the default build system with a custom build script.
The following is an example of a custom build using esbuild via Node.JS. First of all, you'll need to install Node.js in development and make it available for your production build step.
The following is an example of a custom build using esbuild via Node.js. First of all, you'll need to install Node.js in development and make it available for your production build step.

Then you'll need to add `esbuild` to your Node.js packages and the Phoenix packages. Inside the `assets` directory, run:
Expand Down
2 changes: 1 addition & 1 deletion guides/authentication/mix_phx_gen_auth.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ Note that whenever the password changes (either via reset password or directly),

### User Enumeration attacks

A user enumeration attack allows someone to check if an email is registered in the application. The generated authentication code does not attempt to protect from such checks. For instance, when you register an account, if the email is already registered, the code will notify the user the email is already registered.
A user enumeration attack allows someone to check if an email is registered in the application. The generated authentication code does not attempt to protect from such attacks. For instance, when you register an account, if the email is already registered, the code will notify the user the email is already registered.

If your application is sensitive to enumeration attacks, you need to implement your own workflows, which tends to be very different from most applications, as you need to carefully balance security and user experience.

Expand Down

0 comments on commit 57846cb

Please sign in to comment.