Fixed typo in CSRF documentation.

Fixes gh-4792
This commit is contained in:
Robert Roth 2018-04-04 13:03:43 +03:00 committed by Rob Winch
parent fed15f2b01
commit fddc28ba3b
1 changed files with 1 additions and 1 deletions

View File

@ -271,7 +271,7 @@ name: $("meta[name='_csrf_header']").attr("content")
The configured client can be shared with any component of the application that needs to make a request to the CSRF protected resource. The configured client can be shared with any component of the application that needs to make a request to the CSRF protected resource.
One significant different between rest.js and jQuery is that only requests made with the configured client will contain the CSRF token, vs jQuery where __all__ requests will include the token. One significant difference between rest.js and jQuery is that only requests made with the configured client will contain the CSRF token, vs jQuery where __all__ requests will include the token.
The ability to scope which requests receive the token helps guard against leaking the CSRF token to a third party. The ability to scope which requests receive the token helps guard against leaking the CSRF token to a third party.
Please refer to the https://github.com/cujojs/rest/tree/master/docs[rest.js reference documentation] for more information on rest.js. Please refer to the https://github.com/cujojs/rest/tree/master/docs[rest.js reference documentation] for more information on rest.js.