diff options
| author | Jannis Leidel <jannis@leidel.info> | 2011-07-29 09:39:55 +0000 |
|---|---|---|
| committer | Jannis Leidel <jannis@leidel.info> | 2011-07-29 09:39:55 +0000 |
| commit | f0280f2e94e9acdeb34547d49f9cad8c68aa3e83 (patch) | |
| tree | 8855cd95fdbb14f8ddd86b9b93338addec2d3fac /docs | |
| parent | 441c4e08cdec1de95e5f551e74fdd295c3607139 (diff) | |
Fixes #16482 -- Fixes typo in security docs. Thanks, charettes.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@16560 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/topics/security.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/topics/security.txt b/docs/topics/security.txt index 037b6b657d..d2e06f90a9 100644 --- a/docs/topics/security.txt +++ b/docs/topics/security.txt @@ -15,7 +15,7 @@ Cross site scripting (XSS) protection XSS attacks allow a user to inject client side scripts into the browsers of other users. This is usually achieved by storing the malicious scripts in the database where it will be retrieved and displayed to other users, or by getting -users to click a link which will cause the attacker's javascript to be executred +users to click a link which will cause the attacker's javascript to be executed by the user's browser. However, XSS attacks can originate from any untrusted source of data, such as cookies or web services, whenever the data is not sufficiently sanitized before including in a page. |