diff --git a/docs/security.rst b/docs/security.rst index 18b976ab..05c9a62c 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -61,11 +61,11 @@ the form validation framework which does not exist in Flask. JSON Security ------------- -JSON itself is a high-level serilization format, so there is barely +JSON itself is a high-level serialization format, so there is barely anything that could cause security problems, right? You can't declare recursive structures that could cause problems and the only thing that could possibly break are very large responses that can cause some kind of -denial of service at the receivers side. +denial of service at the receiver's side. However there is a catch. Due to how browsers work the CSRF issue comes up with JSON unfortunately. Fortunately there is also a weird part of the