Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Django Round-Up – Meetup Django CH #25

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Sébastien Fievet Sébastien Fievet
September 18, 2014
Programming
0
55

Django Round-Up – Meetup Django CH #25

Avatar for Sébastien Fievet

Sébastien Fievet

September 18, 2014
Tweet

More Decks by Sébastien Fievet

See All by Sébastien Fievet
Introduction to Flask
Avatar for Sébastien Fievet zyegfryed
0
62
Django Round-Up – Meetup Django CH #28
Avatar for Sébastien Fievet zyegfryed
0
60
Django Round-Up – Meetup Django CH #23
Avatar for Sébastien Fievet zyegfryed
0
51
Django Round-Up – Meetup Django CH #21
Avatar for Sébastien Fievet zyegfryed
0
68
Django Round-Up – Meetup Django CH #20
Avatar for Sébastien Fievet zyegfryed
0
70
Django Round-Up – Meetup Django CH #19
Avatar for Sébastien Fievet zyegfryed
2
87
[Django] URL prefix with runserver
Avatar for Sébastien Fievet zyegfryed
0
1.5k
[Django] Generating PDF with PDFForm
Avatar for Sébastien Fievet zyegfryed
0
88
[Django] RESTful API
Avatar for Sébastien Fievet zyegfryed
1
220

Other Decks in Programming

See All in Programming
生成AIを活用したソフトウェア開発ライフサイクル変革の現在値
Avatar for Hiroyuki Mori hiroyukimori
PRO
0
100
SourceGeneratorのススメ
Avatar for tkym htkym
0
200
CSC307 Lecture 06
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
690
AIによる高速開発をどう制御するか？ ガードレール設置で開発速度と品質を両立させたチームの事例
Avatar for tonkotsuboy_com tonkotsuboy_com
7
2.4k
インターン生でもAuth0で 認証基盤刷新が出来るのか
Avatar for takumi taku271
0
190
Package Management Learnings from Homebrew
Avatar for Mike McQuaid mikemcquaid
0
230
ぼくの開発環境2026
Avatar for yuzneri yuzneri
0
240
FOSDEM 2026: STUNMESH-go: Building P2P WireGuard Mesh Without Self-Hosted Infrastructure
Avatar for Date Huang tjjh89017
0
170
【卒業研究】会話ログ分析によるユーザーごとの関心に応じた話題提案手法
Avatar for MomokoShirakawa momok47
0
200
高速開発のためのコード整理術
Avatar for sutetotanuki sutetotanuki
1
410
QAフローを最適化し、品質水準を満たしながらリリースまでの期間を最短化する #RSGT2026
Avatar for shibayu36 shibayu36
2
4.4k
CSC307 Lecture 04
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
660

Featured

See All Featured
Fireside Chat
Avatar for paigeccino paigeccino
41
3.8k
The Limits of Empathy - UXLibs8
Avatar for Cassini Nazir cassininazir
1
220
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4.2k
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.2k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
231
22k
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
120
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
11
830
Impact Scores and Hybrid Strategies: The future of link building
Avatar for Tamara Novitovic tamaranovitovic
0
200
Efficient Content Optimization with Google Search Console & Apps Script
Avatar for Katarina Dahlin katarinadahlin
PRO
1
330
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
254
22k
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
210
24k
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
21k

Transcript

  1. Django Round-Up Sébastien Fievet Meetup Django CH #25

  2. Django 1.7

  3. Django 1.5 end-of-life

  4. Django 1.4 LTS never-ending-release

  5. remove_tags safety Yo dawg ! I heard you like tag

    so I put a tag into your tag to p0wn you !

  6. reverse() can generate URLs pointing to other hosts CVE-2014-0480

  7. File upload denial of service CVE-2014-0481

  8. RemoteUserMiddleware session hijacking CVE-2014-0482

  9. Data leakage via querystring manipulation in admin CVE-2014-0483

  10. Technical Board BDFLs are dead! Long live to BDFLs!

  11. pipsi pip script installer

  12. High Performance Django Scaling Django like a Pro!

  13. All You Need is L*** Daniele Procida

  14. Links • https://docs.djangoproject.com/en/1.7/releases/1.7/ • https://www.djangoproject.com/weblog/2014/aug/20/security/ • https://www.djangoproject.com/weblog/2014/aug/11/remove-tags-advisory/ • https://docs.djangoproject.com/en/dev/internals/organization/#technical-board •

    https://github.com/mitsuhiko/pipsi • https://highperformancedjango.com/ • http://confreaks.com/videos/4454-DjangoCon2014-all-you-need-is-l