0:16:43
A Beginners Guide to Security Exploits in Action
DjangoCon Europe 2023 · June 8, 2023
Mario de la Ossa uses the deliberately insecure TeamSpace Django application to demonstrate five vulnerabilities: SQL injection, unsafe HTML rendering and XSS, wildcard `ALLOWED_HOSTS` and CSRF-related host handling, open redirects, and an exposed `SECRET_KEY`. He shows how each exploit works, including deleting data, running JavaScript,…