diff options
| author | Nick Pope <nick@nickpope.me.uk> | 2021-04-27 12:09:00 +0100 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2021-05-17 12:16:09 +0200 |
| commit | cb91b2d9e3e28d0ede24dbb052faa6e7fead5897 (patch) | |
| tree | 6ba869da57dc76a38857115e096f09426949f50b /docs/ref/request-response.txt | |
| parent | 55b89e8cac2f8cc7cf3f96dfa138b3b9fda81160 (diff) | |
[3.2.x] Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.
Backport of c156e369553c75a30c78b8ed54a57b1101865105 from main
Diffstat (limited to 'docs/ref/request-response.txt')
| -rw-r--r-- | docs/ref/request-response.txt | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/docs/ref/request-response.txt b/docs/ref/request-response.txt index 9595161671..b4bcc22122 100644 --- a/docs/ref/request-response.txt +++ b/docs/ref/request-response.txt @@ -1126,9 +1126,9 @@ Without passing ``safe=False``, a :exc:`TypeError` will be raised. .. warning:: Before the `5th edition of ECMAScript - <https://www.ecma-international.org/ecma-262/5.1/index.html#sec-11.1.4>`_ - it was possible to poison the JavaScript ``Array`` constructor. For this - reason, Django does not allow passing non-dict objects to the + <https://262.ecma-international.org/5.1/#sec-11.1.4>`_ it was possible to + poison the JavaScript ``Array`` constructor. For this reason, Django does + not allow passing non-dict objects to the :class:`~django.http.JsonResponse` constructor by default. However, most modern browsers implement EcmaScript 5 which removes this attack vector. Therefore it is possible to disable this security precaution. |