Skip to content

Commit

Permalink
fix list formatting
Browse files Browse the repository at this point in the history
  • Loading branch information
dantownsend committed Feb 25, 2022
1 parent 672a3ce commit bdf2d97
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/source/csrf/usage.rst
Original file line number Diff line number Diff line change
Expand Up @@ -156,8 +156,8 @@ Should I embed the token in the form, or add it as a HTTP header?

Setting the cookie in the header is preferable as:

* It makes caching easier, as CSRF tokens aren't embedded in HTML forms.
* We no longer have to worry about BREACH attacks.
* It makes caching easier, as CSRF tokens aren't embedded in HTML forms.
* We no longer have to worry about BREACH attacks.

However, you can embed the CSRF token in the form if you want.

Expand Down

0 comments on commit bdf2d97

Please sign in to comment.