diff --git a/docs/releases/3.0.txt b/docs/releases/3.0.txt index f133c58654..50c98ade58 100644 --- a/docs/releases/3.0.txt +++ b/docs/releases/3.0.txt @@ -330,9 +330,8 @@ Security uses frames of itself, you will need to explicitly set ``X_FRAME_OPTIONS = 'SAMEORIGIN'`` for them to continue working. -* :setting:`SECURE_CONTENT_TYPE_NOSNIFF` setting now defaults to ``True``. With - the enabled :setting:`SECURE_CONTENT_TYPE_NOSNIFF`, the - :class:`~django.middleware.security.SecurityMiddleware` sets the +* :setting:`SECURE_CONTENT_TYPE_NOSNIFF` now defaults to ``True``. With this + enabled, :class:`~django.middleware.security.SecurityMiddleware` sets the :ref:`x-content-type-options` header on all responses that do not already have it.