diff options
| author | Theron Luhn <theron@luhn.com> | 2019-09-23 11:02:56 -0700 |
|---|---|---|
| committer | Theron Luhn <theron@luhn.com> | 2019-09-23 11:02:56 -0700 |
| commit | 904314e683cc488871ba8f163ff47a5c3be86db4 (patch) | |
| tree | 49365d16bf8b20b2c77ed8a18854b23dfcee869d /docs/narr | |
| parent | 78db10b672bf91185452e68c2b695c3d4e0272ce (diff) | |
| download | pyramid-904314e683cc488871ba8f163ff47a5c3be86db4.tar.gz pyramid-904314e683cc488871ba8f163ff47a5c3be86db4.tar.bz2 pyramid-904314e683cc488871ba8f163ff47a5c3be86db4.zip | |
Doc fixes from @Deimos
Diffstat (limited to 'docs/narr')
| -rw-r--r-- | docs/narr/security.rst | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/narr/security.rst b/docs/narr/security.rst index f6794dc2c..2b0a2f032 100644 --- a/docs/narr/security.rst +++ b/docs/narr/security.rst @@ -946,7 +946,7 @@ is the current host, however additional origins may be configured by setting are non-standard). If a host in the list of domains starts with a ``.`` then that will allow all subdomains as well as the domain without the ``.``. If no ``Referer`` or ``Origin`` header is present in an HTTPS request, the CSRF check -will fail unless the ``allow_no_origin`` is set. +will fail unless ``allow_no_origin`` is set. If CSRF checks fail then a :class:`pyramid.exceptions.BadCSRFToken` or :class:`pyramid.exceptions.BadCSRFOrigin` exception will be raised. This |