diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/ref/settings.txt | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index 8aa702779a..010e942e43 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -65,9 +65,8 @@ See :doc:`/howto/error-reporting` for more information. Default: ``[]`` (Empty list) A list of strings representing the host/domain names that this Django site can -serve. This is a security measure to prevent an attacker from poisoning caches -and triggering password reset emails with links to malicious hosts by submitting -requests with a fake HTTP ``Host`` header, which is possible even under many +serve. This is a security measure to prevent :ref:`HTTP Host header attacks +<host-headers-virtual-hosting>`, which are possible even under many seemingly-safe web server configurations. Values in this list can be fully qualified names (e.g. ``'www.example.com'``), |