[2.2.x] Fixed typo in docs/topics/http/sessions.txt.

terminator14 · felixxm · commit 61d4a1598993 · 2019-07-23T15:11:54.000+02:00
Backport of 8323691 from master
diff --git a/docs/topics/http/sessions.txt b/docs/topics/http/sessions.txt
@@ -651,7 +651,7 @@ session for their account. If the attacker has control over ``bad.example.com``,
 they can use it to send their session key to you since a subdomain is permitted
 to set cookies on ``*.example.com``. When you visit ``good.example.com``,
 you'll be logged in as the attacker and might inadvertently enter your
-sensitive personal data (e.g. credit card info) into the attackers account.
+sensitive personal data (e.g. credit card info) into the attacker's account.
 
 Another possible attack would be if ``good.example.com`` sets its
 :setting:`SESSION_COOKIE_DOMAIN` to ``"example.com"`` which would cause
