Python Flask XSS - Escape Characters - SQL injection - Cross-Site Scripting - OWASP - Web Security
Expand description for copy/paste snippets below. Please register on https://noirth.com or comment here for questions.
This is a quick video, that cuts right to the point for escaping and protection Flask and other Python web frameworks from the perils of XSS/SQLi or SQL injection/XSRF/etc. Simply include the following in your Flask project.. import flask with escape and apply format and escape to your input(s) ex. username below:
from flask import Flask, request, escape
username = format(escape(request.args.get('username')))
