http://karpoke.ignaciocano.com/tags/injection/Recent content in Injection on Karpoke - Just Another BlogHugo -- 0.167.0esSat, 22 May 2021 17:19:11 +0100http://karpoke.ignaciocano.com/2021/05/22/never-trust-an-upload-s-filename/Sat, 22 May 2021 17:19:11 +0100http://karpoke.ignaciocano.com/2021/05/22/never-trust-an-upload-s-filename/<blockquote> <p>It&rsquo;s generally accepted that we should never simply trust a user&rsquo;s input. Otherwise, we&rsquo;re vulnerable&hellip;</p> </blockquote> <p>» DEV Community | <a href="https://dev.to/kahdev/never-trust-an-upload-s-filename-3fhj">dev.to</a></p>http://karpoke.ignaciocano.com/2018/06/19/10-common-security-gotchas-in-python-and-how-to-avoid-them/Tue, 19 Jun 2018 18:39:00 +0100http://karpoke.ignaciocano.com/2018/06/19/10-common-security-gotchas-in-python-and-how-to-avoid-them/<blockquote> <p>Writing secure code is hard. When you learn a language, a module or a framework, you learn how it supposed to be used. When thinking about security, you need to think about how it can be misused. Python is no exception, even within thestandard library there are documented bad practices for writing hardened applications. Yet, when I’ve spoken to many Python developers they simply aren’t aware of them.</p> </blockquote> <p>» Hacker Noon | <a href="https://hackernoon.com/10-common-security-gotchas-in-python-and-how-to-avoid-them-e19fbe265e03">hackernoon.com</a></p>