Spelunking in Comments and Documentation for Security Footguns
Posted by IncludeSec@reddit | Python | View on Reddit | 2 comments
Hi everyone, we just posted a new article on interesting security footguns that could pop up in applications using third-party Elixir, Python, and Golang libraries. It's a fast read, so check it out! https://blog.includesecurity.com/2024/11/spelunking-in-comments-and-documentation-for-security-footguns/
Hesirutu@reddit
The Python example is a bit strange because basically every sql library works that way (or very similar) and devs are used to it.
skwyckl@reddit
Funny, I am a mainly Python and Elixir dev and have used Tesla recently for an API client. Thank you for the interesting read, also the artwork is very cool.