Never trust an upload's filename
It’s generally accepted that we should never simply trust a user’s input. Otherwise, we’re vulnerable… » DEV Community | dev.to
Injection
10 common security gotchas in Python and how to avoid them
Writing secure code is hard. When you learn a language, a module or a framework, you learn how it supposed to be used. When thinking about security, you need to think about how it can be misused. Python is no exception, even within thestandard library there are documented bad practices for writing hardened applications. Yet, when I’ve spoken to many Python developers they simply aren’t aware of them. » Hacker Noon | hackernoon.com