0:43:18
Unique ways to Hack into a Python Web Service
DjangoCon US 2018 · November 8, 2018
Tilak T explains that Django’s middleware and defaults help prevent common web vulnerabilities, but application architecture, third-party libraries, and unsafe data handling can still introduce serious flaws. He demonstrates JWT weaknesses when tokens are validated by mutable usernames, unsafe YAML deserialization that enables environment-variable disclosure…