mirror of
https://github.com/django/django.git
synced 2025-10-26 15:16:09 +00:00
[3.1.x] Refs #31670 -- Removed whitelist/blacklist terminology in docs and comments.
Backport of 10df5b7177 from master
This commit is contained in:
committed by
Mariusz Felisiak
parent
5ba2dfb9d0
commit
9b95c3bc09
@@ -420,7 +420,7 @@ fields, especially when new fields are added to a model. Depending on how the
|
||||
form is rendered, the problem may not even be visible on the web page.
|
||||
|
||||
The alternative approach would be to include all fields automatically, or
|
||||
blacklist only some. This fundamental approach is known to be much less secure
|
||||
remove only some. This fundamental approach is known to be much less secure
|
||||
and has led to serious exploits on major websites (e.g. `GitHub
|
||||
<https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation>`_).
|
||||
|
||||
|
||||
Reference in New Issue
Block a user