From f2b45ddd99ff23c0bd103f1dda1e1cb0c8dc6d84 Mon Sep 17 00:00:00 2001 From: Tim Graham Date: Thu, 11 Feb 2016 07:58:15 -0500 Subject: Fixed #26206 -- Fixed docs comments causing empty code blocks. --- docs/topics/security.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'docs/topics/security.txt') diff --git a/docs/topics/security.txt b/docs/topics/security.txt index 917817ba6f..0707da0473 100644 --- a/docs/topics/security.txt +++ b/docs/topics/security.txt @@ -30,10 +30,11 @@ malicious input, it is not entirely foolproof. For example, it will not protect the following: .. code-block:: text -.. highlighting as html+django fails due to intentionally missing quotes. +.. highlighting as html+django fails due to intentionally missing quotes. + If ``var`` is set to ``'class1 onmouseover=javascript:func()'``, this can result in unauthorized JavaScript execution, depending on how the browser renders imperfect HTML. (Quoting the attribute value would fix this case.) -- cgit v1.3