diff --git a/core/misc/drupalSettingsLoader.js b/core/misc/drupalSettingsLoader.js
index 6c07f06..7ff292e 100644
--- a/core/misc/drupalSettingsLoader.js
+++ b/core/misc/drupalSettingsLoader.js
@@ -7,7 +7,7 @@
 
   'use strict';
 
-  // Use direct child elements to harden XSS exploits when CSP is on.
+  // Use direct child elements to harden against XSS exploits when CSP is on.
   var settingsElement = document.querySelector('head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]');
 
   /**