並び順

ブックマーク数

期間指定

  • から
  • まで

1 - 12 件 / 12件

新着順 人気順

python format string sql injectionの検索結果1 - 12 件 / 12件

  • Announcing .NET 10 - .NET Blog

    Today, we are excited to announce the launch of .NET 10, the most productive, modern, secure, intelligent, and performant release of .NET yet. It’s the result of another year of effort from thousands of developers around the world. This release includes thousands of performance, security, and functional improvements across the entire .NET stack-from languages and developer tools to workloads-enabl

      Announcing .NET 10 - .NET Blog
    • 構文木のあるものを文字列として扱わない - blog.8-p.info

      ちょっと前に、他のチームの書いたものをセキュリティ的な観点でレビューする、という仕事があった。「SQL インジェクションはありませんか?」みたいなチェックリストを片目に AWS SDK で DynamoDB にアクセスするようなコードをレビューするのは、なかなか隔世の感があった。 私は2000年代の後半から2010年台の頭にかけて、いわゆる Web プログラマ仕事をしていて、Perl から MySQL に SQL を投げて結果を HTML に入れて返すようなものをよく書いていた。当時は SQL インジェクションとか XSS が、よくある脆弱性として語られていた。 この感じ、パブリッククラウドの SQL じゃないデータベースを使っている人々や、最終的には SQL になるけど基本的には OR マッパーを使っている人々、React で HTML を作っているような人々には伝わらないんじゃないかと

      • davepeck.org

        Template strings, also known as t-strings, have been officially accepted as a feature in Python 3.14, which will ship in October 2025. 🎉 I'm excited about t-strings because they make string processing safer and more flexible. In this post, I'll explain what t-strings are, why they were added to Python, and how you can use them. What are t-strings? Template strings are like f-strings with superpow

        • PEP 750 – Template Strings | peps.python.org

          PEP 750 – Template Strings Author: Jim Baker <jim.baker at python.org>, Guido van Rossum <guido at python.org>, Paul Everitt <pauleveritt at me.com>, Koudai Aono <koxudaxi at gmail.com>, Lysandros Nikolaou <lisandrosnik at gmail.com>, Dave Peck <davepeck at davepeck.org> Discussions-To: Discourse thread Status: Final Type: Standards Track Created: 08-Jul-2024 Python-Version: 3.14 Post-History: 09-

            PEP 750 – Template Strings | peps.python.org
          • The AI-Native Software Engineer

            An AI-native software engineer is one who deeply integrates AI into their daily workflow, treating it as a partner to amplify their abilities. This requires a fundamental mindset shift. Instead of thinking “AI might replace me” an AI-native engineer asks for every task: “Could AI help me do this faster, better, or differently?”. The mindset is optimistic and proactive - you see AI as a multiplier

              The AI-Native Software Engineer
            • Handling Concurrency Without Locks

              Concurrency is not very intuitive. You need to train your brain to consider what happens when multiple processes execute a certain code block at the same time. There are several issues I often encounter: Failing to recognize potential concurrency issues: It's not uncommon for both beginner and seasoned developers to completely miss a potential concurrency problem. When this happens, and the concur

              • Building A Generative AI Platform

                After studying how companies deploy generative AI applications, I noticed many similarities in their platforms. This post outlines the common components of a generative AI platform, what they do, and how they are implemented. I try my best to keep the architecture general, but certain applications might deviate. This is what the overall architecture looks like. This is a pretty complex system. Thi

                  Building A Generative AI Platform
                • Prompt injection attacks against GPT-3

                  12th September 2022 Riley Goodside, yesterday: Exploiting GPT-3 prompts with malicious inputs that order the model to ignore its previous directions. pic.twitter.com/I0NVr9LOJq - Riley Goodside (@goodside) September 12, 2022 Riley provided several examples. Here’s the first. GPT-3 prompt (here’s how to try it in the Playground): Translate the following text from English to French: > Ignore the abo

                    Prompt injection attacks against GPT-3
                  • Autonomous testing of services at scale

                    The components of an integration test. The testing infrastructure provides the foundation on top of which engineers write their tests, and the execution platform for running them. Enabling developers to prototype, test, and iterate on new features quickly is important to Facebook’s success. To do this effectively, it’s key to have a stable infrastructure that doesn’t introduce unnecessary friction

                      Autonomous testing of services at scale
                    • June 2025 (version 1.102)

                      Release date: July 9, 2025 Update 1.102.1: The update addresses these issues. Update 1.102.2: The update addresses these issues. Update 1.102.3: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the June 2025 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some

                        June 2025 (version 1.102)
                      • Function calling using LLMs

                        Building AI Agents that interact with the external world. While LLMs excel at generating cogent text based on their training data, they may also need to interact with external systems. Function calling allows them to construct such calls. The LLM does not execute these calls directly, instead it creates a data structure that describes the call, passing that to a separate program for execution and

                          Function calling using LLMs
                        • PgBouncer is useful, important, and fraught with peril

                          Updated 2024-09-17 to reflect updated PgBouncer support for protocol-level prepared statements 🐘 To start, I want to say that I’m appreciative that PgBouncer exists and the work its open source maintainers put into it. I also love working with PostgreSQL, and I’m thankful for the incredible amount of work and improvements that go into it as well. I also think community and industry enthusiasm aro

                            PgBouncer is useful, important, and fraught with peril
                          1