Links published on October 11, 2007

3 links published on this date. See also: all links published in October 2007, latest links.

reform

The Reform library attempts to provide a solid set of functions for encoding output for the most common context targets in web applications (e.g. HTML, XML, JavaScript, etc). The library also takes a conservative view of what are allowable characters based on historical vulnerabilities, and current injection techniques.

Implemented for eight common web-development languages, including Python.

Visit site or read comments.

The Demise of Mobile???

The problem isn’t the capabilities of the device, or standards, or even operators, as much as we’d like to blame them for being the root of all evil. The problem is context.

Isn’t it always?

Visit site or read comments.

Inside Django’s Template Inheritance

Nice write-up of a few things that people — at first — expect to work but which, on further reflection, don’t and shouldn’t.

Visit site or read comments.

Links published on October 13, 2007