From f0280f2e94e9acdeb34547d49f9cad8c68aa3e83 Mon Sep 17 00:00:00 2001 From: Jannis Leidel Date: Fri, 29 Jul 2011 09:39:55 +0000 Subject: [PATCH] Fixes #16482 -- Fixes typo in security docs. Thanks, charettes. git-svn-id: http://code.djangoproject.com/svn/django/trunk@16560 bcc190cf-cafb-0310-a4f2-bffc1f526a37 --- docs/topics/security.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/topics/security.txt b/docs/topics/security.txt index 037b6b657d9..d2e06f90a98 100644 --- a/docs/topics/security.txt +++ b/docs/topics/security.txt @@ -15,7 +15,7 @@ Cross site scripting (XSS) protection XSS attacks allow a user to inject client side scripts into the browsers of other users. This is usually achieved by storing the malicious scripts in the database where it will be retrieved and displayed to other users, or by getting -users to click a link which will cause the attacker's javascript to be executred +users to click a link which will cause the attacker's javascript to be executed by the user's browser. However, XSS attacks can originate from any untrusted source of data, such as cookies or web services, whenever the data is not sufficiently sanitized before including in a page.