williamsbdev

# this command will return places where the application shells out or dynamically executes code:
egrep -r --include "*.py" -e "(exec|eval)\(|subprocess|popen" .

# DJANGO: find places where HTML encoding is turned off via the "safe" attribute:
grep -r --include "*.py" --include "*.html" -e "|safe" .

# DJANGO: find places where unsafe SQL queries are executed:
egrep -r --include "*.py" -e "\.(raw|execute)\(" .

# Non zero values indicate that some sort of CSRF protection is probably enabled.  

williamsbdev

#!/bin/sh

# Some things taken from here
# https://github.com/mathiasbynens/dotfiles/blob/master/.osx

# Set the colours you can use
black='\033[0;30m'
white='\033[0;37m'
red='\033[0;31m'
green='\033[0;32m'