oss-security - First result on google promotes insecure coding (XSS)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAGUWgD-icAVmX4LER-Ctu_98WYKd833tnS0ePLsu72iChJWshg@mail.gmail.com>
Date: Sun, 19 Mar 2023 15:05:24 +0200
From: Georgi Guninski <gguninski@...il.com>
To: oss-security@...ts.openwall.com
Subject: First result on google promotes insecure coding (XSS)

>From my IP and cookie jar, searching google for
"tutorial python cgi" returns as first result [1]
on tutorialspoint.com

In "Simple URL Example:Get Method"

```
first_name = form.getvalue('first_name')
last_name  = form.getvalue('last_name')
print "<h2>Hello %s %s</h2>" % (first_name, last_name)
```

Besides cgi tutorial, this is XSS and CSRF tutorial by example.

Does the so called security "community" plan to reduce teaching
insecure code?

[1] https://www.tutorialspoint.com/python/python_cgi_programming.htm

-- 
We don't need no education, we don't need no thought control
Pink Floyd

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.