diff options
| author | Steve Piercy <web@stevepiercy.com> | 2017-04-30 16:37:21 -0700 |
|---|---|---|
| committer | Steve Piercy <web@stevepiercy.com> | 2017-04-30 16:37:21 -0700 |
| commit | 69828b5aa35ed3cf19941a0771c82418a0733b7e (patch) | |
| tree | 78ea6c34dbb0de8f0bec7e5f207bf5085c6d2b88 /docs/narr/security.rst | |
| parent | 80973f86368ee9bc8f7d8c87d32207cec83d9310 (diff) | |
| download | pyramid-69828b5aa35ed3cf19941a0771c82418a0733b7e.tar.gz pyramid-69828b5aa35ed3cf19941a0771c82418a0733b7e.tar.bz2 pyramid-69828b5aa35ed3cf19941a0771c82418a0733b7e.zip | |
standardize "non-standard"
Diffstat (limited to 'docs/narr/security.rst')
| -rw-r--r-- | docs/narr/security.rst | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/narr/security.rst b/docs/narr/security.rst index ddf496b69..3a6bfa5e5 100644 --- a/docs/narr/security.rst +++ b/docs/narr/security.rst @@ -946,7 +946,7 @@ automatic CSRF checking will also check the referrer of the request to ensure that it matches one of the trusted origins. By default the only trusted origin is the current host, however additional origins may be configured by setting ``pyramid.csrf_trusted_origins`` to a list of domain names (and ports if they -are non standard). If a host in the list of domains starts with a ``.`` then +are non-standard). If a host in the list of domains starts with a ``.`` then that will allow all subdomains as well as the domain without the ``.``. If CSRF checks fail then a :class:`pyramid.exceptions.BadCSRFToken` or |