Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Django Round-Up – Meetup Django CH #19

Django Round-Up – Meetup Django CH #19

Sébastien Fievet

January 24, 2014
Tweet

More Decks by Sébastien Fievet

Other Decks in Programming

Transcript

  1. How to mitigate that attack ๏ Use a distinct Top

    Level Domain (TLD) ๏ Sane configuration ✓ whitelist of allowable file extensions ✓ only serve such files
  2. Links • http://jacobian.org/writing/retiring-as-bdfls/ • https://docs.djangoproject.com/en/1.6/releases/1.6.1/ • https://docs.djangoproject.com/en/1.4/releases/1.4.10/ • https://www.djangoproject.com/weblog/2013/dec/02/image-field-advisory/ •

    https://docs.djangoproject.com/en/1.6/topics/security/#user-uploaded-content • https://docs.djangoproject.com/en/dev/topics/migrations/ • https://docs.djangoproject.com/en/dev/releases/1.7/#app-loading-refactor • https://docs.djangoproject.com/en/dev/topics/db/managers/#create-manager-with-queryset-methods • https://docs.djangoproject.com/en/dev/ref/models/custom-lookups/ • http://pyvideo.org/video/1780/transforming-code-into-beautiful-idiomatic-pytho • https://speakerdeck.com/pyconslides/transforming-code-into-beautiful-idiomatic-python-by-raymond-hettinger-1 • http://orchardup.github.io/fig/