diff options
| author | Tim Graham <timograham@gmail.com> | 2017-11-01 10:57:59 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-11-01 10:57:59 -0400 |
| commit | afd375fc343baa46e61036087bc43b3d096bb0ca (patch) | |
| tree | e1af42ebe5f7db72f44e5474cc51a0a4a5719385 /docs/topics/http | |
| parent | cbe334918a0a80762249706a15b699714b5dc828 (diff) | |
Fixed #28741 -- Removed unnecessary leading dot from cross-domain cookie examples.
Diffstat (limited to 'docs/topics/http')
| -rw-r--r-- | docs/topics/http/sessions.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/topics/http/sessions.txt b/docs/topics/http/sessions.txt index 2112926cc0..ce5d8019bd 100644 --- a/docs/topics/http/sessions.txt +++ b/docs/topics/http/sessions.txt @@ -653,7 +653,7 @@ you'll be logged in as the attacker and might inadvertently enter your sensitive personal data (e.g. credit card info) into the attackers account. Another possible attack would be if ``good.example.com`` sets its -:setting:`SESSION_COOKIE_DOMAIN` to ``".example.com"`` which would cause +:setting:`SESSION_COOKIE_DOMAIN` to ``"example.com"`` which would cause session cookies from that site to be sent to ``bad.example.com``. Technical details |