aboutsummaryrefslogtreecommitdiffstats
path: root/guides
diff options
context:
space:
mode:
authorRichard Schneeman <richard.schneeman+no-recruiters@gmail.com>2018-01-28 16:52:50 -0600
committerGitHub <noreply@github.com>2018-01-28 16:52:50 -0600
commit6b8c161fc2cabdadd33826d21f9bd099041b8069 (patch)
tree180e1d5d86ff781dca7640cb7c3679d791f200ac /guides
parent1c239df3deb349650be9b305b2c8980d6659ab3e (diff)
parent600c4138dd778f4e5633846b5b68a89dbb77193d (diff)
downloadrails-6b8c161fc2cabdadd33826d21f9bd099041b8069.tar.gz
rails-6b8c161fc2cabdadd33826d21f9bd099041b8069.tar.bz2
rails-6b8c161fc2cabdadd33826d21f9bd099041b8069.zip
Merge pull request #31817 from composerinteralia/mediocre-joke
Remove joke in security guide [ci skip]
Diffstat (limited to 'guides')
-rw-r--r--guides/source/security.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/security.md b/guides/source/security.md
index de0b523057..74256c7b84 100644
--- a/guides/source/security.md
+++ b/guides/source/security.md
@@ -551,7 +551,7 @@ Here are some ideas how to hide honeypot fields by JavaScript and/or CSS:
* make the elements very small or color them the same as the background of the page
* leave the fields displayed, but tell humans to leave them blank
-The most simple negative CAPTCHA is one hidden honeypot field. On the server side, you will check the value of the field: If it contains any text, it must be a bot. Then, you can either ignore the post or return a positive result, but not saving the post to the database. This way the bot will be satisfied and moves on. You can do this with annoying users, too.
+The most simple negative CAPTCHA is one hidden honeypot field. On the server side, you will check the value of the field: If it contains any text, it must be a bot. Then, you can either ignore the post or return a positive result, but not saving the post to the database. This way the bot will be satisfied and moves on.
You can find more sophisticated negative CAPTCHAs in Ned Batchelder's [blog post](http://nedbatchelder.com/text/stopbots.html):