Skip to content

Commit

Permalink
Typo (#888)
Browse files Browse the repository at this point in the history
  • Loading branch information
jvitasek authored and dg committed Apr 20, 2021
1 parent 0ff40f9 commit 7445baf
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion en/form-presenter.texy
Expand Up @@ -284,7 +284,7 @@ Vulnerability Protection

Nette Framework puts a great effort to be safe and since forms are the most common user input, Nette forms are as good as impenetrable. All is maintained dynamically and transparently, nothing has to be set manually.

In addition to protecting the forms agains attack well-known vulnerabilities such as [Cross-Site Scripting (XSS) |vulnerability-protection#cross-site-scripting-xss] and [Cross-Site Request Forgery (CSRF)|vulnerability-protection#cross-site-request-forgery-csrf] it does a lot of small security tasks that you no longer have to think about.
In addition to protecting the forms against attacks targeted at well-known vulnerabilities such as [Cross-Site Scripting (XSS) |vulnerability-protection#cross-site-scripting-xss] and [Cross-Site Request Forgery (CSRF)|vulnerability-protection#cross-site-request-forgery-csrf], it does a lot of small security tasks that you no longer have to think about.

For example, it filters out all control characters from the inputs and checks the validity of the UTF-8 encoding, so that the data from the form will always be clean. For select boxes and radio lists, it verifies that the selected items were actually from the offered ones and there was no forgery. We've already mentioned that for single-line text input, it removes end-of-line characters that an attacker could send there. For multiline inputs, it normalizes the end-of-line characters. And so on.

Expand Down

0 comments on commit 7445baf

Please sign in to comment.