This commit is contained in:
florentx 2010-06-18 09:59:20 +02:00
parent 03c4bb4abc
commit 7083b35e6a

View file

@ -61,11 +61,11 @@ the form validation framework which does not exist in Flask.
JSON Security
-------------
JSON itself is a high-level serilization format, so there is barely
JSON itself is a high-level serialization format, so there is barely
anything that could cause security problems, right? You can't declare
recursive structures that could cause problems and the only thing that
could possibly break are very large responses that can cause some kind of
denial of service at the receivers side.
denial of service at the receiver's side.
However there is a catch. Due to how browsers work the CSRF issue comes
up with JSON unfortunately. Fortunately there is also a weird part of the