Spelling batch 7

jsoref · kingthorin · commit 43639fb75f43 · 2022-12-29T08:00:54.000-05:00
* 0123456789
* abcdefghijklmnopqrstuvwxyz
* access
* analyzed
* attack
* attribute
* boolean
* comparison
* concurrency
* consecutive
* constructor
* criteria
* earlier
* empty
* entry
* expression
* for our
* forwarded
* heartbeat
* hirshberg
* identifiable
* implementation
* initial
* internationalization
* language
* launch
* length
* logs
* management
* mysql
* naive
* padding
* param
* parentheses
* penetration
* query
* read
* reflected
* remote
* repositories
* response
* should
* specific
* stripped
* successfully
* targeted
* threshold
* vulnerabilities

Signed-off-by: Josh Soref &lt;jsoref@users.noreply.github.com&gt;
diff --git a/addOns/ascanrules/CHANGELOG.md b/addOns/ascanrules/CHANGELOG.md
@@ -7,6 +7,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - SQL rule should not target NoSQL Dbs.
 
+### Changed
+- Maintenance changes.
+
 ## [50] - 2022-12-13
 ### Changed
 - The Directory Browsing scan rule now includes example alert functionality for documentation generation purposes (Issue 6119).
@@ -214,7 +217,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ## 29 - 2018-01-19
 
 - Issue 3979: Fix reflected XSS in PUT response.
-- Issue 3978: Handle relfected XSS in JSON response.
+- Issue 3978: Handle reflected XSS in JSON response.
 - Issue 4211: Fix false positive in FormatString scanner.
 
 ## 28 - 2017-11-27
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CodeInjectionScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CodeInjectionScanRule.java
@@ -155,7 +155,7 @@ public void scan(HttpMessage msg, String paramName, String value) {
 
         // Begin scan rule execution
         log.debug(
-                "Checking [{}][{}], parameter [{}] for Dynamic Code Injection vulnerabilites",
+                "Checking [{}][{}], parameter [{}] for Dynamic Code Injection Vulnerabilities",
                 msg.getRequestHeader().getMethod(),
                 msg.getRequestHeader().getURI(),
                 paramName);
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CommandInjectionScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CommandInjectionScanRule.java
@@ -380,7 +380,7 @@ int getTimeSleep() {
     }
 
     /**
-     * Scan for OS Command Injection Vulnerabilites
+     * Scan for OS Command Injection Vulnerabilities
      *
      * @param msg a request only copy of the original message (the response isn't copied)
      * @param paramName the parameter name that need to be exploited
@@ -391,7 +391,7 @@ public void scan(HttpMessage msg, String paramName, String value) {
 
         // Begin scan rule execution
         log.debug(
-                "Checking [{}][{}], parameter [{}] for OS Command Injection vulnerabilites",
+                "Checking [{}][{}], parameter [{}] for OS Command Injection Vulnerabilities",
                 msg.getRequestHeader().getMethod(),
                 msg.getRequestHeader().getURI(),
                 paramName);
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/FormatStringScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/FormatStringScanRule.java
@@ -175,19 +175,19 @@ public void scan(HttpMessage msg, String param, String value) {
             sb.append('\n');
             String initialAttackPayload = sb.toString();
 
-            HttpMessage intialAttackMsg = getNewMsg();
-            setParameter(intialAttackMsg, param, initialAttackPayload);
+            HttpMessage initialAttackMsg = getNewMsg();
+            setParameter(initialAttackMsg, param, initialAttackPayload);
             try {
-                sendAndReceive(intialAttackMsg);
+                sendAndReceive(initialAttackMsg);
             } catch (UnknownHostException ex) {
                 log.debug(
                         "Caught {} {} when accessing: {}.\nThe target may have replied with a poorly formed redirect due to our input.",
                         ex.getClass().getName(),
                         ex.getMessage(),
-                        intialAttackMsg.getRequestHeader().getURI());
+                        initialAttackMsg.getRequestHeader().getURI());
                 return; // Something went wrong, no point continuing
             }
-            if (isPage500(intialAttackMsg)) {
+            if (isPage500(initialAttackMsg)) {
                 StringBuilder sb1 = new StringBuilder();
                 sb1.append(initialMessage);
                 for (i = 0; i < 10; i++) {
@@ -224,7 +224,7 @@ && isPage200(verificationMsg)) {
                             .setParam(param)
                             .setAttack(initialAttackPayload)
                             .setOtherInfo(getError('1'))
-                            .setMessage(intialAttackMsg)
+                            .setMessage(initialAttackMsg)
                             .raise();
                 }
                 return;
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HeartBleedActiveScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HeartBleedActiveScanRule.java
@@ -851,7 +851,7 @@ public class HeartBleedActiveScanRule extends AbstractHostPlugin {
      */
     static final byte heartbeatRecordByte = 0x18;
 
-    /** the beartbeat request that we will send to */
+    /** the heartbeat request that we will send to */
     static final byte heartbeatBuffer[] = {
         0x00,
         0x03, // data Length = 0x00 0x03 = 3 in decimal. This length is important later...
@@ -985,7 +985,7 @@ public void scan() {
                                 break;
                             }
                             log.debug(
-                                    "Got a reponse from the server, but it was not a server hello 'Done' message");
+                                    "Got a response from the server, but it was not a server hello 'Done' message");
                         }
                     } catch (SocketTimeoutException es) {
                         throw new IOException(
@@ -1230,7 +1230,7 @@ static SSLRecord recvmsg(InputStream is, int timeoutMs) throws IOException {
      * reads the requested number of bytes from the inputstream, blocking if necessary
      *
      * @param s the inputstream from which to read
-     * @param length the number of bytes to reas
+     * @param length the number of bytes to read
      * @return a byte array containing the requested number of bytes from the inputstream
      * @throws IOException
      */
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PaddingOracleScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PaddingOracleScanRule.java
@@ -115,7 +115,7 @@ public void init() {
     }
 
     /**
-     * Scan for Paddding Oracle Vulnerabilites
+     * Scan for Padding Oracle Vulnerabilities
      *
      * @param msg a request only copy of the original message (the response isn't copied)
      * @param paramName the parameter name that need to be exploited
@@ -270,8 +270,8 @@ private boolean isEncrypted(byte[] value) {
     }
 
     /**
-     * Enumeration Utility which is able to manage all specifi encoding/decoding tasks that could be
-     * met during rule's testing
+     * Enumeration Utility which is able to manage all specific encoding/decoding tasks that could
+     * be met during rule's testing
      */
     public enum OracleEncoder {
         HEX {
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssScanRule.java
@@ -221,7 +221,7 @@ public void scan(HttpMessage sourceMsg, String param, String value) {
                             hca.getHtmlContexts(Constant.getEyeCatcher(), null, 0);
 
                     for (HtmlContext context : contexts) {
-                        // Loop through the returned contexts and lauch targetted attacks
+                        // Loop through the returned contexts and launch targeted attacks
                         if (attackWorked || isStop()) {
                             break;
                         }
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SqlInjectionScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SqlInjectionScanRule.java
@@ -628,7 +628,7 @@ public void init() {
         log.debug("Doing RDBMS specific error based? {}", doSpecificErrorBased);
         log.debug("Doing generic RDBMS error based? {}", doGenericErrorBased);
         log.debug("Using a max of {} requests", doErrorMaxRequests);
-        log.debug("Doing expession based? {}", doExpressionBased);
+        log.debug("Doing expression based? {}", doExpressionBased);
         log.debug("Using a max of {} requests", doExpressionMaxRequests);
         log.debug("Using boolean based? {}", doBooleanBased);
         log.debug("Using a max of {} requests", doBooleanMaxRequests);
@@ -1027,7 +1027,7 @@ && matchBodyPattern(msg1, errorPattern, sb)) {
                     }
 
                     // if the results of the "AND 1=1" match the original query (using either the
-                    // stipped or unstripped versions), we may be onto something.
+                    // stripped or unstripped versions), we may be onto something.
                     if (andTrueBodyOutput[booleanStrippedUnstrippedIndex].compareTo(
                                     normalBodyOutput[booleanStrippedUnstrippedIndex])
                             == 0) {
@@ -1910,7 +1910,7 @@ private void expressionBasedAttack(
                 if (confirmExpressionOutputStripped.compareTo(normalBodyOutputStripped) != 0) {
                     // the confirm query did not return the same results.  This means that arbitrary
                     // queries are not all producing the same page output.
-                    // this means the fact we earier reproduced the original page output with a
+                    // this means the fact we earlier reproduced the original page output with a
                     // modified parameter was not a coincidence
 
                     // Likely a SQL Injection. Raise it
@@ -1949,7 +1949,7 @@ public int getRisk() {
 
     /**
      * Replace body by stripping of pattern string. The URLencoded pattern will also be stripped
-     * off. The URL decoded pattern will not be stripped off, as this is not necessary of rour
+     * off. The URL decoded pattern will not be stripped off, as this is not necessary for our
      * purposes, and causes issues when attempting to decode parameter values such as '%' (a single
      * percent character) This is mainly used for stripping off a testing string in HTTP response
      * for comparison against the original response. Reference: TestInjectionSQL
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SqlInjectionSqLiteScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SqlInjectionSqLiteScanRule.java
@@ -208,7 +208,7 @@ public class SqlInjectionSqLiteScanRule extends AbstractAppParamPlugin {
     private long parseDelayDifference = 0;
     private long incrementalDelayIncreasesForAlert = 0;
 
-    private char[] RANDOM_PARAMETER_CHARS = "abcdefghijklmnopqrstuvwyxz0123456789".toCharArray();
+    private char[] RANDOM_PARAMETER_CHARS = "abcdefghijklmnopqrstuvwxyz0123456789".toCharArray();
     private static final Map<String, String> ALERT_TAGS =
             CommonAlertTag.toMap(
                     CommonAlertTag.OWASP_2021_A03_INJECTION,
@@ -427,7 +427,7 @@ public void scan(HttpMessage originalMessage, String paramName, String originalP
                     long modifiedTimeUsed = msgDelay.getTimeElapsedMillis();
 
                     // before we do the time based checking, first check for a known error message
-                    // from the atatck, indicating a SQL injection vuln
+                    // from the attack, indicating a SQL injection vuln
                     for (Pattern errorMessagePattern : errorMessagePatterns) {
                         Matcher matcher =
                                 errorMessagePattern.matcher(msgDelay.getResponseBody().toString());
diff --git a/addOns/ascanrules/src/main/javahelp/org/zaproxy/zap/extension/ascanrules/resources/help/contents/ascanrules.html b/addOns/ascanrules/src/main/javahelp/org/zaproxy/zap/extension/ascanrules/resources/help/contents/ascanrules.html
@@ -195,7 +195,7 @@ <H2>Parameter Tampering</H2>
 
 This rule submits requests with parameter values known to cause errors to be displayed to the user if handled improperly. Responses are checked to make sure that they return
 a server error status code, then compared with a normal HTTP response to make sure it does not raise an alert if the bad parameter has no effect on output. Finally, the content
-of the reponse body is compared against various patterns that may be found in Java servlet, Microsoft VBScript, OLE DB, JET, PHP and Tomcat errors. If a match is found, an alert is raised and
+of the response body is compared against various patterns that may be found in Java servlet, Microsoft VBScript, OLE DB, JET, PHP and Tomcat errors. If a match is found, an alert is raised and
 the scanner returns immediately.
 <p>
 Latest code: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/ParameterTamperScanRule.java">ParameterTamperScanRule.java</a>
@@ -235,7 +235,7 @@ <H2>Server Side Include</H2>
 <H2>Source Code Disclosure - CVE-2012-1823</H2>
 Exploit CVE-2012-1823 to disclose server-side PHP source code on a PHP-CGI based web server.<br>
 Only analyzes responses that are text based (HTML, JSON, XML, etc.), in order to avoid false positives which may occur with image or other binary content.<br>
-JavaScript responses are only anaylzed when a LOW alert threshold is set.
+JavaScript responses are only analyzed when a LOW alert threshold is set.
 <p>
 Latest code: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SourceCodeDisclosureCve20121823ScanRule.java">SourceCodeDisclosureCve20121823ScanRule.java</a>
 
diff --git a/addOns/ascanrules/src/test/java/org/zaproxy/zap/extension/ascanrules/HtAccessScanRuleUnitTest.java b/addOns/ascanrules/src/test/java/org/zaproxy/zap/extension/ascanrules/HtAccessScanRuleUnitTest.java
@@ -39,7 +39,7 @@
 import org.zaproxy.zap.testutils.NanoServerHandler;
 
 /** Unit test for {@link HtAccessScanRule}. */
-class HtAccesScanRuleUnitTest extends AbstractAppFilePluginUnitTest<HtAccessScanRule> {
+class HtAccessScanRuleUnitTest extends AbstractAppFilePluginUnitTest<HtAccessScanRule> {
 
     private static final String URL = "/.htaccess";
     private static final String HTACCESS_BODY = "order allow,deny";
diff --git a/addOns/ascanrules/src/test/resources/org/zaproxy/zap/extension/ascanrules/crosssitescriptingscanrule/InputInSpan.html b/addOns/ascanrules/src/test/resources/org/zaproxy/zap/extension/ascanrules/crosssitescriptingscanrule/InputInSpan.html
@@ -1,5 +1,5 @@
 <html>
-<td style="HEIGHT: 31px" vAlign="bottom"><span id="lblSearchCreteria" class="clsSubTitle"
+<td style="HEIGHT: 31px" vAlign="bottom"><span id="lblSearchCriteria" class="clsSubTitle"
 style="display:inline-block;font-weight:bold;height:26px;width:100%;" >Page Accessed:
 General; Date Range: 01/01/2011 to 02/01/2011; User last name contains @@@name@@@</span>
 </td>
diff --git a/addOns/ascanrulesAlpha/CHANGELOG.md b/addOns/ascanrulesAlpha/CHANGELOG.md
@@ -4,7 +4,8 @@ All notable changes to this add-on will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## Unreleased
-
+### Changed
+- Maintenance changes.
 
 ## [42] - 2022-12-13
 ### Added
@@ -227,7 +228,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ## 20 - 2017-11-24
 
 - Code changes for Java 9 (Issue 2602).
-- Correct handling of messages with emtpy path.
+- Correct handling of messages with empty path.
 - Add Get for Post Scanner.
 
 ## 19 - 2017-05-25
@@ -327,7 +328,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 - Promoted to beta XXE and Padding Oracle Plugins
 - Added a new Expression Language Plugin
-- Implemented Internazionalization for ELInjection
+- Implemented Internationalization for ELInjection
 - Added ExampleSimpleActiveScanner
 
 ## 2 - 2013-09-11
diff --git a/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/LdapInjectionScanRule.java b/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/LdapInjectionScanRule.java
@@ -73,7 +73,7 @@ public class LdapInjectionScanRule extends AbstractAppParamPlugin {
 
     // characters used in the generation of random parameters
     private static final char[] RANDOM_PARAMETER_CHARS =
-            "abcdefghijklmnopqrstuvwyxz0123456789".toCharArray();
+            "abcdefghijklmnopqrstuvwxyz0123456789".toCharArray();
 
     public static final Tech Protocol =
             new Tech("Protocol", I18N_PREFIX + "ldapinjection.technologies.protocol");
diff --git a/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/MongoDbInjectionScanRule.java b/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/MongoDbInjectionScanRule.java
@@ -64,8 +64,8 @@ public class MongoDbInjectionScanRule extends AbstractAppParamPlugin {
     private int SLEEP_SHORT_TIME, SLEEP_LONG_TIME;
     private static final String INSERT_SHORT_TIME = "INSERT_SHORT_TIME",
             INSERT_LONG_TIME = "INSERT_LONG_TIME";
-    private static final int SHORT_TRESHOLD = 1500;
-    private static final int LONG_TRESHOLD = 3000;
+    private static final int SHORT_THRESHOLD = 1500;
+    private static final int LONG_THRESHOLD = 3000;
     // Packages of attack rules
     private static final String[] ALL_DATA_PARAM_INJECTION =
             new String[] {"[$ne]", "[$regex]", "[$gt]", "[$eq]"};
@@ -217,7 +217,7 @@ public Map<String, String> getAlertTags() {
 
     @Override
     public void init() {
-        LOG.debug("Initialising MongoDB penertration tests");
+        LOG.debug("Initialising MongoDB penetration tests");
         switch (this.getAttackStrength()) {
             case LOW:
                 SLEEP_SHORT_TIME = 1000;
@@ -391,15 +391,15 @@ public void scan(HttpMessage msg, String param, String value) {
                     LOG.debug(
                             "Trying for a longer time with the value: {}",
                             SLEEP_INJECTION[index][1]);
-                    if (msgInjAttack.getTimeElapsedMillis() >= aveRtt + SHORT_TRESHOLD) {
+                    if (msgInjAttack.getTimeElapsedMillis() >= aveRtt + SHORT_THRESHOLD) {
                         phase = INSERT_LONG_TIME;
                         sleepValueToInj =
                                 SLEEP_INJECTION[index][1].replaceFirst(
                                         INSERT_LONG_TIME, Integer.toString(timeLong));
                         msgInjAttack = getNewMsg();
                         setParameter(msgInjAttack, param, sleepValueToInj);
                         sendAndReceive(msgInjAttack, false);
-                        if (msgInjAttack.getTimeElapsedMillis() >= aveRtt + LONG_TRESHOLD) {
+                        if (msgInjAttack.getTimeElapsedMillis() >= aveRtt + LONG_THRESHOLD) {
                             newAlert()
                                     .setConfidence(Alert.CONFIDENCE_HIGH)
                                     .setParam(param)
diff --git a/addOns/ascanrulesBeta/CHANGELOG.md b/addOns/ascanrulesBeta/CHANGELOG.md
@@ -4,7 +4,8 @@ All notable changes to this add-on will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## Unreleased
-
+### Changed
+- Maintenance changes.
 
 ## [44] - 2022-12-13
 ### Changed
@@ -377,7 +378,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## 13 - 2014-04-10
 
-- Promoted new XXE Plugin to test for remotr and local XML External Entity Vulnerability.
+- Promoted new XXE Plugin to test for remote and local XML External Entity Vulnerability.
 - Promoted new PaddingOracle plugin to test for possible encryption padding errors.
 - Promoted PXSS tests to beta.
 - Promoted Command Injection release.
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/BackupFileDisclosureScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/BackupFileDisclosureScanRule.java
@@ -370,7 +370,7 @@ public void scan() {
             // is it worth looking for a copy of the file?
             if (statusCode == HttpStatusCode.NOT_FOUND) {
                 log.debug(
-                        "The original file request was not successfuly retrieved (status = {}), so there is not much point in looking for a backup of a non-existent file!",
+                        "The original file request was not successfully retrieved (status = {}), so there is not much point in looking for a backup of a non-existent file!",
                         statusCode);
                 return;
             }
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ExpressionLanguageInjectionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ExpressionLanguageInjectionScanRule.java
@@ -117,7 +117,7 @@ public void init() {
     }
 
     /**
-     * Scan for Expression Language Injection Vulnerabilites
+     * Scan for Expression Language Injection Vulnerabilities
      *
      * @param msg a request only copy of the original message (the response isn't copied)
      * @param paramName the parameter name that need to be exploited
@@ -162,7 +162,7 @@ public void scan(HttpMessage msg, String paramName, String value) {
                 // We Found IT!
                 // First do logging
                 LOG.debug(
-                        "[Expression Langage Injection Found] on parameter [{}]  with payload [{}]",
+                        "[Expression Language Injection Found] on parameter [{}]  with payload [{}]",
                         paramName,
                         payload);
 
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/GitMetadata.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/GitMetadata.java
@@ -635,7 +635,7 @@ public byte[] getObjectData(
                 // pack file of the SHA11 entry we are looking at
                 // NB: the various tables in the "pack index" file are sorted by the corresponding
                 // SHA1.
-                // 2 adjacent entries in the offset table (for consequtive SHA11 entries) could have
+                // 2 adjacent entries in the offset table (for consecutive SHA11 entries) could have
                 // wildly different offsets into the "pack" file
                 // and the offsets in the table are therefore not sorted by offset.
                 // In order to calculate the deflated length of an entry in the pack file (which is
@@ -693,7 +693,7 @@ public byte[] getObjectData(
      * specified offset
      *
      * @param packfiledata byte array containing the raw data associated with the pack file
-     * @param packfiledataoffset the offset for the specified intry into the raw pack file data
+     * @param packfiledataoffset the offset for the specified entry into the raw pack file data
      * @param entryLength the deflated length of the packfile object entry
      * @param packFileVersion the version of the pack file. The version determines the file format,
      *     and thus the object extraction logic.
@@ -817,7 +817,7 @@ private byte[] getPackedObjectData(
             } else if (entryType == 0x6) {
                 // for 'DELTA_ENCODED object with offset to base'
                 // this object type is not common in small repos. it will get more common in larger
-                // Git repositorie.
+                // Git repositories.
                 int deltabaseoffset = readBigEndianModifiedBase128Number(entryBuffer);
                 int deltaoffsetBytesRead = this.tempbytesread;
                 log.debug(
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpsAsHttpScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpsAsHttpScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ProxyDisclosureScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ProxyDisclosureScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/RelativePathConfusionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/RelativePathConfusionScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SessionFixationScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SessionFixationScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/UsernameEnumerationScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/UsernameEnumerationScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/resources/org/zaproxy/zap/extension/ascanrulesBeta/resources/Messages.properties b/addOns/ascanrulesBeta/src/main/resources/org/zaproxy/zap/extension/ascanrulesBeta/resources/Messages.properties

Original file line number	Diff line number	Diff line change
`@@ -115,7 +115,7 @@ public void init() {`
`115`	`115`	`}`
`116`	`116`
`117`	`117`	`/**`
`118`		`- * Scan for Paddding Oracle Vulnerabilites`
	`118`	`+ * Scan for Padding Oracle Vulnerabilities`
`119`	`119`	`*`
`120`	`120`	`* @param msg a request only copy of the original message (the response isn't copied)`
`121`	`121`	`* @param paramName the parameter name that need to be exploited`
`@@ -270,8 +270,8 @@ private boolean isEncrypted(byte[] value) {`
`270`	`270`	`}`
`271`	`271`
`272`	`272`	`/**`
`273`		`- * Enumeration Utility which is able to manage all specifi encoding/decoding tasks that could be`
`274`		`- * met during rule's testing`
	`273`	`+ * Enumeration Utility which is able to manage all specific encoding/decoding tasks that could`
	`274`	`+ * be met during rule's testing`
`275`	`275`	`*/`
`276`	`276`	`public enum OracleEncoder {`
`277`	`277`	`HEX {`
Original file line number	Diff line number	Diff line change
`@@ -221,7 +221,7 @@ public void scan(HttpMessage sourceMsg, String param, String value) {`
`221`	`221`	`hca.getHtmlContexts(Constant.getEyeCatcher(), null, 0);`
`222`	`222`
`223`	`223`	`for (HtmlContext context : contexts) {`
`224`		`- // Loop through the returned contexts and lauch targetted attacks`
	`224`	`+ // Loop through the returned contexts and launch targeted attacks`
`225`	`225`	`if (attackWorked \|\| isStop()) {`
`226`	`226`	`break;`
`227`	`227`	`}`