Collaborate Disseminate
I want to provide a way for my users to download their data, which are stored in S3, through my app. Should I provide them with a public url followed by a key random key, as in this example?
http://s3.amazonaws.com/user-xyz123/folder/some_… Continue reading Letting users to download data from my Django app
In order to better protect my Django web app, I want to reduce the leakage of information that could help an attacker profile my application. If you were an attacker, what would you look at to identify a Django web app?
From OWASP, I know … Continue reading How can you fingerprint a Django web app?
What payload can we embed in the jpeg that would work on website build using Django?what parser could be there?
Continue reading File upload payload for Django Framework? [closed]
I am working on a security testing project, where I have noticed that the form action of a login page takes whatever is fed to URI as a parameter, the respective part of the login page is as follows:
<form action=”/admin/login/?param=W… Continue reading Ways to exploit a form action value when it s reflected from URI on React-Django
I am by no means a security engineer , and I have barely started my journey as a web developer. I’m utilizing a Python package known as Django for my backend and react.js for my front end. Recently I have incorporated django-channels, whi… Continue reading Is sending token authentication information via cookie headers secure?
My server is using Django Rest Framework. My mobile app logs in using token authentication. However, I also have a webview in the mobile app where I need to log in. I can’t inject the auth token on every request in the webview, so I use th… Continue reading Is it safe to create a session from an auth token?
My try:
import base64
def form_valid(self, form):
self.object = form.save(commit=False)
if self.request.POST.get(‘image_as_base64’, None):
format, imgstr = self.request.POST.get(‘image_as_base64’).split(‘;base64,’)
… Continue reading How to save image in base64 format as file in secure way? [closed]
Looking for ideas/feedback.
We have a django web-app with postgresql.
We use git for source code.
We have circleci for CI.
We deploy on AWS.
What is the most secured/best practices in terms of password management & key storage for o… Continue reading Best Practices for password/keys web-app management
I’m using LDAP authentication in Django, as shown below and also using password hashers.
from django_auth_ldap.config import PosixGroupType, LDAPSearch
import ldap
PASSWORD_HASHERS = [
‘django.contrib.auth.hashers.PBKDF2PasswordHashe… Continue reading How to apply hashing SHA256 on Django LDAP login? [closed]
i am trying to connect Okta with a custom Django (v.3.0.2) app i am coding, using the mozilla-django-oidc library. So far the initial user authentication and account creation (using Django’s user model) works, but i don’t understand what i… Continue reading Django, mozilla_django_oidc and admin interface [migrated]