mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-04-12 03:22:21 +00:00
Code Issues32 Releases Wiki Activity

[1.10.x] Fixed typo in docs/ref/settings.txt.

Browse Source 
Backport of 501c9930101060d63fb5c25c1dc0154a6c23b775 from master
This commit is contained in:
Ian Lee 2016-11-11 04:01:48 -08:00 committed by Tim Graham
parent 7fd379719a
commit 25fe13d6b0
1 changed files with 1 additions and 1 deletions

2
docs/ref/settings.txt

@ -2939,7 +2939,7 @@ session cookie.
HTTPOnly_ is a flag included in a Set-Cookie HTTP response header. It
is not part of the :rfc:`2109` standard for cookies, and it isn't honored
consistently by all browsers. However, when it is honored, it can be a
useful way to mitigate the risk of client side script accessing the
useful way to mitigate the risk of a client side script accessing the
protected cookie data.
Turning it on makes it less trivial for an attacker to escalate a cross-site