summaryrefslogtreecommitdiff
path: root/doc/source
diff options
context:
space:
mode:
Diffstat (limited to 'doc/source')
-rw-r--r--doc/source/features.rst5
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index 9bd9907..e3ae876 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -386,6 +386,11 @@ it's broadly (mis)used all around the web.
386Snuffleupagus provides a white and blacklist mechanism, to explicitly allow 386Snuffleupagus provides a white and blacklist mechanism, to explicitly allow
387and forbid specific functions call from being issued inside ``eval``. 387and forbid specific functions call from being issued inside ``eval``.
388 388
389While it's heavily recommended to only use the whitelist feature, the blacklist
390one exists because some adminsys might want to use it to catch automated
391script-kiddies attacks, while being confident that doing so won't break a
392single website.
393
389.. _samesite-feature: 394.. _samesite-feature:
390 395
391Protection against cross site request forgery 396Protection against cross site request forgery