Links published on October 11, 2007
reform
The Reform library attempts to provide a solid set of functions for encoding output for the most common context targets in web applications (e.g. HTML, XML, JavaScript, etc). The library also takes a conservative view of what are allowable characters based on historical vulnerabilities, and current injection techniques.
Implemented for eight common web-development languages, including Python.
The Demise of Mobile???
The problem isn’t the capabilities of the device, or standards, or even operators, as much as we’d like to blame them for being the root of all evil. The problem is context.
Isn’t it always?
Inside Django’s Template Inheritance
Nice write-up of a few things that people — at first — expect to work but which, on further reflection, don’t and shouldn’t.