A4 portrait - PET: Python Entre Todos - Python Argentina

More documents

Recommendations

Info

23 Taint aware This kind of functions are associated with a determined kind of vulnerability; so the right way to use the cleaner decorator is specifying the kind of stain. Again, there are two was of doing it. In the definition: @cleaner(XSS) def plain_text(input): ... or before we start using the function in our program: plain_text = cleaner(XSS)(plain_text) Taint aware One of the main parts of the library takes care of tracking the taint information for built-in classes (like int or str). The library dynamically defines subclasses of these to add an attribute that alows that tracking; for each object the attribute consists of a set of tags representing the taints the object has in a certain moment of the execution. The objects are considered untainted when the tags set is empty. In the context of the library, these subclasses are called taint-aware classes. The inherited methods of built-in classes are redefined to make them capable to propagate the taint information. For example, if a and b are tainted objects, c will have the union of the taints of both: c = a.action(b) Present state In this brief article I’ve exposed the main characteristics of the library; to know more advanced features and other implementation details you can visit http://www.juanjoconti.com.ar/taint/ More information & links • OWASP App Sec 2010: http://alturl.com/5u94e • OWASP: http://www.owasp.org • Python security: http://www.pythonsecurity.org PET: English Translation (Issue 1, August 2010) — http://revista.python.org.ar
Applied Dynamism 24 Python Argentina Our goal is gathering Python users, be a nexus for communication across the country. Reach users and companies and promote Python, exchange infomation, share experiences and, in general, be the local frame of reference in using and spreading this technology. Site with docs, spanish tutorial, frequently asked questions, jobs board: http://python.org.ar Subscribe to the list for help! Send email to: pyar-subscribe@python.org.ar Or join as in IRC and chat: #pyar (at irc.freenode.org) Applied Dynamism Author: Juan Pedro Fisanotti Translator: Claudio Freire It often happens that when I comment on some superior feature of a language to another person that doesn’t know it, the person reacts with phrases like “would you use that in real life?” or “very nice, but that’s theory, in practice it doesn’t work”, PET: English Translation (Issue 1, August 2010) — http://revista.python.org.ar
Page 1 and 2: PET: English Translation The magazi
Page 3 and 4: All articles are (c) their authors,
Page 5 and 6: How you can help PET 2 On July 25th
Page 7 and 8: Going on with the story 4 borders,
Page 9 and 10: from gc import commonsense - Finish
Page 11 and 12: Circular references 8 The usefulnes
Page 13 and 14: Context managers 10 Context manager
Page 15 and 16: Context managers 12 print "Starting
Page 17 and 18: Introduction to Unit Testing with P
Page 19 and 20: How should the test be? 16 raise No
Page 21 and 22: How should the test be? 18 test_fin
Page 23 and 24: How to use it? 20 intercepted and m
Page 25: ssink 22 If you have access to the
Page 29 and 30: First “non-dynamic” solution 26
Page 31 and 32: Ingredients 28 In this article i’
Page 33 and 34: Decorator functions without argumen
Page 35 and 36: Decorator classes with arguments 32
Page 37 and 38: Installing Web2Py 34 • Straightfo
Page 39 and 40: Administrative Interface 36 This pa
Page 41 and 42: Summary: 38 Summary: In this articl
Page 43 and 44: Feedback and Clarifications 40 inpu

A4 portrait - PET: Python Entre Todos - Python Argentina

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?