diff options
| author | joe <joe@61a7d7f5-40b7-0310-9c16-bb0ea8cb1845> | 2009-08-19 13:19:41 +0000 |
|---|---|---|
| committer | joe <joe@61a7d7f5-40b7-0310-9c16-bb0ea8cb1845> | 2009-08-19 13:19:41 +0000 |
| commit | 2d74f18383305391fcf448e423f377ab32541c87 (patch) | |
| tree | cfb43a69f9d29ae6d8cbf85b45fe0c06c62e4f4e /doc | |
| parent | 6941d29cccfc336b5eac89ec7770515a7922bac5 (diff) | |
| download | neon-2d74f18383305391fcf448e423f377ab32541c87.tar.gz | |
* doc/security.xml: Wording fix.
git-svn-id: http://svn.webdav.org/repos/projects/neon/trunk@1692 61a7d7f5-40b7-0310-9c16-bb0ea8cb1845
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/security.xml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/security.xml b/doc/security.xml index f014276..52cae13 100644 --- a/doc/security.xml +++ b/doc/security.xml @@ -104,10 +104,10 @@ <sect2> <title>Control character insertion in error messages</title> - <para>Where error messages (as returned by (<xref - linkend="ne_get_error"/>) contain data supplied by the server, the - untrusted data is sanitised to prevent both control characters and - non-ASCII characters from being used. This prevents any attacks + <para>Where error messages (as returned by + (<xref linkend="ne_get_error"/>) contain data supplied by the + server, the untrusted data is sanitised to remove both control + characters and non-ASCII characters. This prevents any attacks where such error messages are exposed to the user and can potentially distort the presentation of the interface (for example, through the use of a carriage return character in a text |