-

javiereguiluz · javiereguiluz · commit 67aed06c8a01 · 2024-05-06T12:47:21.000+02:00
diff --git a/security/csrf.rst b/security/csrf.rst
@@ -14,7 +14,7 @@ actor could create the following website:
     <html>
         <body>
             <form action="https://example.com/settings/update-email" method="POST">
-                <input type="hidden" name="email" value="malicious-actor-address@some-domain.com" />
+                <input type="hidden" name="email" value="malicious-actor-address@some-domain.com"/>
             </form>
             <script>
                 document.forms[0].submit();
