#26206: Small in-text example is lost on "Security in Django"
-------------------------------+--------------------
     Reporter:  frostbtn       |      Owner:  nobody
         Type:  Bug            |     Status:  new
    Component:  Documentation  |    Version:  1.9
     Severity:  Normal         |   Keywords:
 Triage Stage:  Unreviewed     |  Has patch:  0
Easy pickings:  1              |      UI/UX:  0
-------------------------------+--------------------
 After v 1.8 a tiny example has disappeared from **Security in Django** ->
 **Cross site scripting (XSS) protection** section:
 {{{
 <style class={{ var }}>...</style>
 }}}

 It is present on v 1.8 and before it:
 https://docs.djangoproject.com/en/1.8/topics/security/#cross-site-
 scripting-xss-protection

 And missing from v 1.9 and current vNext
 https://docs.djangoproject.com/en/1.9/topics/security/#cross-site-
 scripting-xss-protection
 https://docs.djangoproject.com/en/dev/topics/security/#cross-site-
 scripting-xss-protection

 (I came across it from somewhat misleading conversation on `bleach`
 sanitizer: https://github.com/mozilla/bleach/issues/133)

--
Ticket URL: <https://code.djangoproject.com/ticket/26206>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/051.be7c4dc4b67ee001ca55bd68d052742e%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to