Python WRD
Contribute to freeutka-cmd/python development by creating an account on GitHub. (more…)
Read more »
This should have been obvious to me for a longer time, but until earlier
today I did not really realize the severity of the issues caused by
str.format on untrusted user input. It came up as a way to bypass the
Jinja2 Sandbox in a way that would permit r…