Commitb845591

authored and

committed

Updated XSSI Json Hijacking Caution

Only methods that respond to GET requests are vulnerable to XSSI 'JSON Hijacking'. POST requests remain unaffected.

1 parent3842f59 commitb845591Copy full SHA for b845591

File tree

-1

lines changed

-1

lines changed

Lines changed: 4 additions & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -496,7 +496,10 @@ to ``application/json``.
`496`	`496`	as the outer-most array to ``JsonResponse`` and not an indexed array so
`497`	`497`	that the final result is an object (e.g. ``{"object": "not inside an array"}``)
`498`	`498`	instead of an array (e.g. ``[{"object": "inside an array"}]``). Read
`499`		- the `OWASP guidelines`_ for more information.
	`499`	+ the `OWASP guidelines`_ for more information.
	`500`	`+`
	`501`	`+ Only methods that respond to GET requests are vulnerable to XSSI 'JSON Hijacking'.`
	`502`	`+ Methods responding to POST requests only remain unaffected.`
`500`	`503`
`501`	`504`	`JSONP Callback`
`502`	`505`	`~~~~~~~~~~~~~~`

Comments

(0)