Scribd Logo
Upload

Welcome to Scribd!

  • 431 views

    Python Security Best Practices Cheat Sheet

    Uploaded by

    John Avgerinos
    1. Use Python 3 and keep your dependencies up to date to avoid security vulnerabilities. Scan your code with Bandit and use Pipenv for environment and dependency management. 2. Be careful with string formatting and user input. Understand open source licenses and do not deserialize untrusted data that could enable code execution. 3. Stay aware of new vulnerabilities by keeping dependencies updated and monitoring advisories.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Python Security Best Practices Cheat Sheet

    Uploaded by

    John Avgerinos
    431 views1 page
    1. Use Python 3 and keep your dependencies up to date to avoid security vulnerabilities. Scan your code with Bandit and use Pipenv for environment and dependency management. 2. Be careful with string formatting and user input. Understand open source licenses and do not deserialize untrusted data that could enable code execution. 3. Stay aware of new vulnerabilities by keeping dependencies updated and monitoring advisories.

    Original Description:

    Python Security Best Practices

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    1. Use Python 3 and keep your dependencies up to date to avoid security vulnerabilities. Scan your code with Bandit and use Pipenv for environment and dependency management. 2. Be careful with string formatting and user input. Understand open source licenses and do not deserialize untrusted data that could enable code execution. 3. Stay aware of new vulnerabilities by keeping dependencies updated and monitoring advisories.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    431 views1 page

    Python Security Best Practices Cheat Sheet

    Uploaded by

    John Avgerinos
    1. Use Python 3 and keep your dependencies up to date to avoid security vulnerabilities. Scan your code with Bandit and use Pipenv for environment and dependency management. 2. Be careful with string formatting and user input. Understand open source licenses and do not deserialize untrusted data that could enable code execution. 3. Stay aware of new vulnerabilities by keeping dependencies updated and monitoring advisories.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 1

    1. Use Python 3 6.

    Handle requests safely

    What version of Python are you using? The end of Understand how the requests library utilizes certain security
    Python 2 is near—January 1, 2020. If you are using practices so you can get the most out of them. Keep your version of
    Python 2 past that date, you leave yourself open to certifi up to date—the requests library uses it to verify certificates.
    any emerging security vulnerabilities.

    7. Be careful with string formatting


    2. Scan your code with Bandit
    There are multiple ways to format strings in Python. When
    Bandit is an open source security scanner for Python code. It
    formatting strings from user input, extra care is needed to
    can be run locally or as part of your CI/CD pipeline.
    avoid things like injection or code execution. The Template
    class in the string module is a more secure way to format
    3. Use Pipenv for environment and dependency strings with user input.

    Python management
    8. Be careful with string formatting

    Security Best
    Deterministic builds are important for predictable behavior
    in production. However, pinning your dependencies to
    Understand the different types of open source licenses and
    achieve this leaves you open to security vulnerabilities.
    adhere to their terms. Be wary of any project that does not

    Practices
    Pipenv helps you manage your environment and
    have a license; you may not like the terms of the license they
    dependencies in a predictable, secure way.
    eventually adopt. Over 10% of packages on PyPI fall into this
    category.

    Cheat Sheet 4. Watch your import statements


    Python import statements are flexible but can be exploited. 9. Deserialize selectively
    Implicit relative imports (deprecated as of Python 3) leave
    Do not deserialize data from an untrusted source. Python’s pickle
    your code vulnerable to malicious code execution. Whatever
    module allows for this using pickle.load. Deserializing from an
    import method you use, remember be sure you trust the
    untrusted source can result in arbitrary code execution.
    module--importing executes code!

    10. Keep up-to-date on vulnerabilities


    5. Download packages with care
    Just because your app is secure today does not mean it will be
    Assume that there are malicious packages available on PyPI. secure tomorrow. Stay up to date on new vulnerabilities by using
    When installing, be sure to spell the package name the Pipenv safety package or consider trying Snyk’s tools, which
    correctly--you don’t want to install a malicious package that can alert you when a new vulnerability is found in a package that
    is named for a common misspelling of a popular package. you are using.

    www.snyk.io

    You might also like