test0908
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fixed some typos/grammar in clickjacking docs 

git-svn-id: http://code.djangoproject.com/svn/django/trunk@16299 bcc190cf-cafb-0310-a4f2-bffc1f526a37
This commit is contained in:
Luke Plant 2011-05-30 22:50:11 +00:00
parent 524c5fa07a
commit 0994416d3f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/ref/clickjacking.txt
View File

@ -24,7 +24,7 @@ for convenience. An attacker site might create an "I Like Ponies" button on one
of their own pages, and load the store's page in a transparent iframe such that of their own pages, and load the store's page in a transparent iframe such that
the "Buy Now" button is invisibly overlaid on the "I Like Ponies" button. If the the "Buy Now" button is invisibly overlaid on the "I Like Ponies" button. If the
user visits the attacker site and clicks "I Like Ponies" he will inadvertently user visits the attacker site and clicks "I Like Ponies" he will inadvertently
click on the online store's "Buy Now" button and unknowningly purchase the item. click on the online store's "Buy Now" button and unknowingly purchase the item.
Preventing clickjacking Preventing clickjacking
======================= =======================
@ -70,7 +70,7 @@ every outgoing ``HttpResponse``. If you want DENY instead, set the
When using the middleware there may be some views where you do **not** want the When using the middleware there may be some views where you do **not** want the
X-Frame-Options header set. For those cases, you can use a view decorator that X-Frame-Options header set. For those cases, you can use a view decorator that
tells the middleware to not set the header:: tells the middleware not to set the header::
from django.http import HttpResponse from django.http import HttpResponse
from django.views.decorators.clickjacking import xframe_options_exempt from django.views.decorators.clickjacking import xframe_options_exempt