Index: openacs-4/packages/acs-tcl/tcl/security-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/security-procs.tcl,v diff -u -N -r1.93 -r1.94 --- openacs-4/packages/acs-tcl/tcl/security-procs.tcl 9 May 2018 15:33:29 -0000 1.93 +++ openacs-4/packages/acs-tcl/tcl/security-procs.tcl 14 May 2018 13:22:24 -0000 1.94 @@ -2324,7 +2324,7 @@ # # Another problem is mixed content. When we set the nonce-src # and 'unsafe-inline', and a browser honoring nonces ignores - # the 'unsafe-inline', but some javascript framework requires + # the 'unsafe-inline', but some JavaScript framework requires # it (e.g ckeditor4), we have a problem. Therefore, an # application can force "'unsafe-inline'" which means that we # do not set the nonce-src in such cases.