python Programming Glossary: vulnerabilities
How can I save my secret keys and password securely in my version control system? http://stackoverflow.com/questions/11575398/how-can-i-save-my-secret-keys-and-password-securely-in-my-version-control-system a fixed passphrase could theoretically lead to brute force vulnerabilities if attackers had access to many encrypted repos files. IMO the..
Problems with issuing cp command with Popen in Python http://stackoverflow.com/questions/12267774/problems-with-issuing-cp-command-with-popen-in-python include quoting escaping and possibly introducing security vulnerabilities into your code if you fail to properly sanitize user input...
Avoid using db.UserProperty() when storing user objects http://stackoverflow.com/questions/13999106/avoid-using-db-userproperty-when-storing-user-objects instance for that specific user. In my opinion this opens vulnerabilities in your application's users validation. The answer from @RocketDonkey..
Pass list to AES key generator in PyCrypto http://stackoverflow.com/questions/14539360/pass-list-to-aes-key-generator-in-pycrypto keys until they fit may lead to major cryptographic vulnerabilities. So is using ECB mode instead of a more secure mode like CBC..
Python exercises to hone your skills [closed] http://stackoverflow.com/questions/29578/python-exercises-to-hone-your-skills has little web security tutorials to help you learn about vulnerabilities and ways people might hack a your website. For me one of the..
Is there an alternative to rexec for Python sandboxing? http://stackoverflow.com/questions/525056/is-there-an-alternative-to-rexec-for-python-sandboxing it has been deprecated removed due to some security vulnerabilities. Is there an alternative My goal is to have Python code execute..
Sending mail via sendmail from python http://stackoverflow.com/questions/73781/sending-mail-via-sendmail-from-python like to have the library take care of header injection vulnerabilities itself so just dumping a string to popen ' usr bin sendmail'..
How do I check if a file exists using Python? http://stackoverflow.com/questions/82831/how-do-i-check-if-a-file-exists-using-python This is a race condition that can often lead to security vulnerabilities. An attacker can create a symlink to an arbitrary file immediately..
|