mirror of
https://github.com/django/django.git
synced 2025-06-05 03:29:12 +00:00
[1.10.x] Fixed typo in docs/ref/settings.txt.
Backport of 501c9930101060d63fb5c25c1dc0154a6c23b775 from master
This commit is contained in:
parent
7fd379719a
commit
25fe13d6b0
@ -2939,7 +2939,7 @@ session cookie.
|
|||||||
HTTPOnly_ is a flag included in a Set-Cookie HTTP response header. It
|
HTTPOnly_ is a flag included in a Set-Cookie HTTP response header. It
|
||||||
is not part of the :rfc:`2109` standard for cookies, and it isn't honored
|
is not part of the :rfc:`2109` standard for cookies, and it isn't honored
|
||||||
consistently by all browsers. However, when it is honored, it can be a
|
consistently by all browsers. However, when it is honored, it can be a
|
||||||
useful way to mitigate the risk of client side script accessing the
|
useful way to mitigate the risk of a client side script accessing the
|
||||||
protected cookie data.
|
protected cookie data.
|
||||||
|
|
||||||
Turning it on makes it less trivial for an attacker to escalate a cross-site
|
Turning it on makes it less trivial for an attacker to escalate a cross-site
|
||||||
|
Loading…
x
Reference in New Issue
Block a user