GitList

Browse code

Fix security documentation, XSS -> CSRF

Signed-off-by: Thomas Grainger <tagrain@gmail.com>
(cherry picked from commit ea8f9c972393e0929e643190573412410bf39c6a)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

Thomas Grainger authored on 2016/04/15 19:27:09
Showing 1 changed files

docs/security/security.md

History View file @ cde2df6

@@ -106,7 +106,7 @@ arbitrary containers.
                      For this reason, the REST API endpoint (used by the Docker CLI to
                      communicate with the Docker daemon) changed in Docker 0.5.2, and now
                      uses a UNIX socket instead of a TCP socket bound on 127.0.0.1 (the
                     -latter being prone to cross-site-scripting attacks if you happen to run
                     +latter being prone to cross-site request forgery attacks if you happen to run
                      Docker directly on your local machine, outside of a VM). You can then
                      use traditional UNIX permission checks to limit access to the control
                      socket.