Merge pull request #691 from w3c/chrisn-fix-should

SHA: 6185cec
Reason: push, by Djuffin

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: Djuffin

index.html

@@ -7,7 +7,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-ED" rel="stylesheet">
   <meta content="Bikeshed version 5edf5e459, updated Thu Jun 22 11:28:01 2023 -0700" name="generator">
   <link href="https://www.w3.org/TR/webcodecs/" rel="canonical">
-  <meta content="d1ca4736e7fc6f9b712a3533d4386c1313c4e532" name="document-revision">
+  <meta content="6185cec02e54aa79409b97c7c402ef79d4572b94" name="document-revision">
 <style>
 main > dl > dd {
   margin-bottom: 1em;
@@ -6630,7 +6630,7 @@ <h2 class="heading settled" data-level="12" id="security-considerations"><span c
 are provided and direct access to invoke the codec control methods. This also
 affords attackers the ability to invoke sequences of control methods that were
 not previously possible via the higher level APIs.</p>
-   <p>User Agents <em class="rfc2119">SHOULD</em> mitigate this risk by extensively
+   <p>The Working Group expects User Agents to mitigate this risk by extensively
 fuzzing their implementation with random inputs and control method invocations.
 Additionally, User Agents are encouraged to isolate their underlying codecs in
 processes with restricted privileges (sandbox) as a barrier against successful