aboutsummaryrefslogtreecommitdiffstats
path: root/docs/topics/ajax-csrf-cors.md
diff options
context:
space:
mode:
authorTom Christie2013-01-27 19:34:16 +0000
committerTom Christie2013-01-27 19:34:16 +0000
commitccb4ef081191bb8fa3d76d698d61190c1d9c3f65 (patch)
tree378098b5030a0dcaf29440f060211e2a51bf732a /docs/topics/ajax-csrf-cors.md
parentd4f38dece44d0d57c1eb71584807219e6e893055 (diff)
downloaddjango-rest-framework-ccb4ef081191bb8fa3d76d698d61190c1d9c3f65.tar.bz2
Typo
Diffstat (limited to 'docs/topics/ajax-csrf-cors.md')
-rw-r--r--docs/topics/ajax-csrf-cors.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/topics/ajax-csrf-cors.md b/docs/topics/ajax-csrf-cors.md
index a96d6ac5..f7d12940 100644
--- a/docs/topics/ajax-csrf-cors.md
+++ b/docs/topics/ajax-csrf-cors.md
@@ -14,7 +14,7 @@ AJAX requests that are made on a different site from the API they are communicat
## CSRF protection
-[Cross Site Request Forgery][csrf] protection is a mechanism of guarding against a particular type of attack, which can occur when a user has not logged out of a web site, and continues to have a valid session. In this circumstance a malicious site may be able to perform actions against the target site, within the cotext of the logged-in session.
+[Cross Site Request Forgery][csrf] protection is a mechanism of guarding against a particular type of attack, which can occur when a user has not logged out of a web site, and continues to have a valid session. In this circumstance a malicious site may be able to perform actions against the target site, within the context of the logged-in session.
To guard against these type of attacks, you need to do two things: