diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/howto/custom-file-storage.txt | 2 | ||||
| -rw-r--r-- | docs/ref/files/storage.txt | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/docs/howto/custom-file-storage.txt b/docs/howto/custom-file-storage.txt index ef234be6d6..50f6f6a334 100644 --- a/docs/howto/custom-file-storage.txt +++ b/docs/howto/custom-file-storage.txt @@ -90,7 +90,7 @@ to the ``get_valid_name()`` method described above. extension. Previously, an underscore followed by a number (e.g. ``"_1"``, ``"_2"``, - etc.) was appended to the filename until an avaible name in the destination + etc.) was appended to the filename until an available name in the destination directory was found. A malicious user could exploit this deterministic algorithm to create a denial-of-service attack. This change was also made in Django 1.5.9 and 1.4.14. diff --git a/docs/ref/files/storage.txt b/docs/ref/files/storage.txt index a8567fdcb3..3d00c563c4 100644 --- a/docs/ref/files/storage.txt +++ b/docs/ref/files/storage.txt @@ -88,7 +88,7 @@ The Storage Class extension. Previously, an underscore followed by a number (e.g. ``"_1"``, ``"_2"``, - etc.) was appended to the filename until an avaible name in the + etc.) was appended to the filename until an available name in the destination directory was found. A malicious user could exploit this deterministic algorithm to create a denial-of-service attack. This change was also made in Django 1.5.9 and 1.4.14. |