RomanNum3ral
/
scrapy
mirror of https://github.com/scrapy/scrapy.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Small documentation fixes.

This commit is contained in:
Andrey Rakhmatullin 2019-08-22 20:32:56 +05:00 committed by Adrián Chaves
parent b01d69a1bf
commit 16351344a6
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docs/topics/downloader-middleware.rst
View File

@ -320,16 +320,16 @@ HttpAuthMiddleware
``http_auth_domain`` spider attribute to the domain which requires this
authentication (its subdomains will be also handled in the same way).
You can set ``http_auth_domain`` to ``None`` to enable the
authentication for all requests but usually this is not needed.
authentication for all requests but you risk leaking your authentication
credentials to unrelated domains.
.. warning::
In the previous Scrapy versions HttpAuthMiddleware sent the
authentication data with all requests, which is a security problem if
the spider makes requests to several different domains. Currently if
the ``http_auth_domain`` attribute is not set, the middleware will use
the domain of the first request, which will work for some spider but
not for others. In the future the middleware will produce an error
instead.
In previous Scrapy versions HttpAuthMiddleware sent the authentication
data with all requests, which is a security problem if the spider
makes requests to several different domains. Currently if the
``http_auth_domain`` attribute is not set, the middleware will use the
domain of the first request, which will work for some spiders but not
for others. In the future the middleware will produce an error instead.
Example::