Re:Paged Out #6 is out
by elsadek on Sunday March 30, 2025 @04:46AM
(#43522535)
Thanks @GICodeWarrior for taking time commenting on the article. Shamefully, I can already imagine a scenario on how the attack could be carried out.
Fortunately, the vulnerability can be corrected by introducing escapejs template filter. Big thanks to @gynvael.
[ Parent
| on HN ]
Re:Paged Out #6 is out
by GICodeWarrior on Sunday March 30, 2025 @01:56PM
(#43526099)
Encoding for each scenario can be quite complex unfortunately. Django does have some template filters to help.
I recommend following the documentation carefully, and using a JSON API or other similarly standard mechanism if the documented options are insufficient.