Skip to content

Commit 778a88f

Browse files
committed
python: update qhelp
removing custom middleware stack will _not_ enable CSRF protection
1 parent 85f1d92 commit 778a88f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

python/ql/src/Security/CWE-352/CSRFProtectionDisabled.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747

4848
<p>
4949
The protecting middleware was probably commented out during a testing phase, when server-side token generation was not set up.
50-
Simply commenting it back in (or remove the custom middleware stack) will enable CSRF protection.
50+
Simply commenting it back in will enable CSRF protection.
5151
</p>
5252

5353
</example>

0 commit comments

Comments
 (0)