From b5d9dbdf2bba8df4c85cd0db308b3a467d763d02 Mon Sep 17 00:00:00 2001 From: Jacob Walls Date: Mon, 1 Jun 2026 10:38:44 -0400 Subject: Refs #36905 -- Moved JSONResponse safe param discussion to versionchanged box. Follow-up to 6e15ac8066312328de279e3e072667416c205bfc. --- django/http/response.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'django') diff --git a/django/http/response.py b/django/http/response.py index dbefb17359..fe267f700f 100644 --- a/django/http/response.py +++ b/django/http/response.py @@ -747,9 +747,7 @@ class JsonResponse(HttpResponse): """ An HTTP response class that consumes data to be serialized to JSON. - :param data: Data to be dumped into json. By default only ``dict`` objects - are allowed to be passed due to a security flaw before ECMAScript 5. See - the ``safe`` parameter for more information. + :param data: Data to be dumped into json. :param encoder: Should be a json encoder class. Defaults to ``django.core.serializers.json.DjangoJSONEncoder``. :param safe: Controls if only ``dict`` objects may be serialized. Defaults -- cgit v1.3