commit - 3300cbe06a9567c66ee63f3866bcbcf3430e0205
commit + 909ea500a4ccb227e1be09f046499d59f2898143
blob - f5087faacdc41a8e039e2de4acd4f48ddbde4998
blob + abb16a5639ae86df38eae1c3f7cc12f969cb72eb
--- README.md
+++ README.md
@@ -111,8 +111,8 @@ listener process is the only one that needs internet a
 sandboxed.  When a CGI script needs to be executed, the executor
 (outside of the sandbox) sets up a pipe and gives one end to the
 listener, while the other is bound to the CGI script standard output.
-This way, is still possible to execute CGI scripts without restriction
-even in the presence of a sandbox.
+This way, is still possible to execute CGI scripts without
+restrictions even in the presence of a sandbox.
 
 On OpenBSD, the listener process runs with the `stdio recvfd rpath
 inet` pledges and has `unveil(2)`ed only the directories that it