Biblioteca de fragmentos

Fragmentos probados y listos para copiar en Python, Flask, JavaScript, SQL, HTML, CSS y Bash. Abre cualquiera en el playground.

Mostrar solo los snippets guardados en este navegador

4 fragmentos

flask

Safe file upload

Check the extension, size and filename before saving an upload.

import os
import uuid
from flask import request, abort
from werkzeug.utils import secure_filename

intermediate #uploads#security#files

python

Generate a secure random token

Use the secrets module (never random) for passwords, tokens and reset links.

import secrets
import string

reset_token = secrets.token_urlsafe(32)          # for links: /reset/<token>
api_key = "pk_" + secrets.token_hex(24)

beginner #security#secrets#auth

flask

Rate limit a route

Stop brute-force attempts with Flask-Limiter.

from flask_limiter import Limiter
from flask_limiter.util import get_remote_address

limiter = Limiter(key_func=get_remote_address, storage_uri="memory://")   # use redis:// in production
limiter.init_app(app)

beginner #security#rate-limit#login

flask

Send CSRF token with fetch

Put the token in a meta tag and send it as X-CSRFToken from JavaScript.

# base.html
# <meta name="csrf-token" content="{{ csrf_token() }}">

# app.py
from flask_wtf import CSRFProtect

beginner #csrf#security#javascript

PandaDev

Servicios

Catálogo de apps

Aprender

Empresa

Ayuda

Cambiar idioma

Biblioteca de fragmentos

Safe file upload

Generate a secure random token

Rate limit a route

Send CSRF token with fetch