Learnings

<p>Mozilla Tutorial for Django web application security: </p>

<p>Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code: </p>

<p>A collection of Django security-related tools and topics. If you are concerned about security and use django for productivity, this can be of help. </p>

<p>Google's extension to check for breached credentials </p>

<p>Asim Hussain's very educative talk on ng-conf: 3 web app hacking cases. </p>

<p>Python Security Best Practices Cheat Sheet </p>

<p>Awesome Python Security </p>

<p>Awesome Python Security resources </p>

<p>An awesome security checklist written by Sqreen folks that you should definitely take a look into </p>

<p>Very good talk about security on web apps </p>

<p>You should try this lib in order to keep your Rest API safe </p>

<p>You should be careful when naming your heroku apps </p>

<p>New browser features to secure Single Page Applications: </p>

<p>10 common security gotchas in Python and how to avoid them: </p>

<p>Auto-incremented primary keys are not very safe, consider using uuid </p>

<p>BinaryAlert: Serverless, Real-time &amp; Retroactive Malware Detection </p>

<p>Process untrusted XML safely with defusedxml Python lib: </p>

<p>Hacking your own password hashes to test security: </p>

<p>Let users paste passwords: </p>

<p>HTTPOnly flag on the session cookies helps to prevent XSSs from escalating to session hijack: #std:setting-SESSION_COOKIE_HTTPONLY</p>

<p>SHA1 first collision was generated. You should be using SHA256: </p>

<p>Use this lib to estimate password strength in Python: </p>