diff options
| author | Andrey Andreev <narf@devilix.net> | 2014-12-21 14:59:53 +0100 |
|---|---|---|
| committer | Andrey Andreev <narf@devilix.net> | 2014-12-21 14:59:53 +0100 |
| commit | 8ec7a153d18a744a73b7397789e247d7652a40ce (patch) | |
| tree | 93f4e50ba9287a9f27ca72bf05e0afeea5833b3d /user_guide_src/source/libraries/security.rst | |
| parent | 0823ed197254fbab0e6ceb0d0a9f237b315b313b (diff) | |
| parent | 08191be30a81ca5843c8f41a189c9d26d40d5f68 (diff) | |
Merge pull request #3429 from jim-parry/userguide/fix-reference-level
User Guide Tuning
Diffstat (limited to 'user_guide_src/source/libraries/security.rst')
| -rw-r--r-- | user_guide_src/source/libraries/security.rst | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/user_guide_src/source/libraries/security.rst b/user_guide_src/source/libraries/security.rst index 0c51e342b..a39ef5976 100644 --- a/user_guide_src/source/libraries/security.rst +++ b/user_guide_src/source/libraries/security.rst @@ -12,8 +12,9 @@ application, processing input data for security. <div class="custom-index container"></div> +************* XSS Filtering -============= +************* CodeIgniter comes with a Cross Site Scripting Hack prevention filter which can either run automatically to filter all POST and COOKIE data @@ -57,8 +58,9 @@ browser may attempt to execute. // file failed the XSS test } +********************************* Cross-site request forgery (CSRF) -================================= +********************************* You can enable CSRF protection by altering your **application/config/config.php** file in the following way:: |