Python
Input Validation, Files and Secrets
Most security problems come from trusting input, trusting paths and storing secrets in the wrong place. Each has a standard, boring, correct answer.
Input validation, safe file handling, secrets, eval and exec risks, unsafe deserialization and path traversal.
2 notes
Most security problems come from trusting input, trusting paths and storing secrets in the wrong place. Each has a standard, boring, correct answer.
eval, exec, shell commands, string built queries and pickle all take text and turn it into action. Each has a safe alternative that costs almost nothi...