mirror of
https://github.com/chylex/Nextcloud-News.git
synced 2025-05-12 07:34:05 +02:00
typo
This commit is contained in:
parent
699bbd7cb8
commit
b5e65e051f
@ -1,6 +1,6 @@
|
||||
# Sync API v2 (Draft)
|
||||
|
||||
The **News app** offers a RESTful API which can be used to sync folders, feeds and items.
|
||||
The **News app** offers a RESTful API which can be used to sync folders, feeds and items. The API also supports [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS) which means that you can access the API from your browser using JavaScript.
|
||||
|
||||
## API Stability Contract
|
||||
|
||||
@ -95,8 +95,6 @@ The response body is a JSON structure that looks like this:
|
||||
}
|
||||
```
|
||||
|
||||
The API also supports [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS) which means that you can access the API from your browser using JavaScript.
|
||||
|
||||
## Security Guidelines
|
||||
Read the following notes carefully to prevent being subject to security exploits:
|
||||
* All string fields in a JSON response unless explicitly noted otherwise are provided in without sanitation. This means that if you do not escape it properly before rendering you will be vulnerable to [XSS](https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29) attacks
|
||||
|
Loading…
Reference in New Issue
Block a user