https://insinuator.net/tags/django/ Recent content in Django on Insinuator.net - Bold Statements Hugo en-us Fri, 16 May 2014 00:00:00 +0000 https://insinuator.net/2014/05/django-image-validation-vulnerability/ Fri, 16 May 2014 00:00:00 +0000 https://insinuator.net/2014/05/django-image-validation-vulnerability/ <p>Hi!</p> <p>In the course of a recent penetration test, we came across an Image validation vulnerability in Django when using the <a href="http://www.pythonware.com/products/pil/">Python-Imaging-Library (PIL)</a> which we want to explain in this post.</p> <p>Everybody who doesn’t know what <a href="https://www.djangoproject.com/">Django</a> and/or the PIL is:<br> Django is a framework to create web applications with Python (comparable to Rails or Zend). The PIL is a powerful standard python library which provides a toolset to modify, display and verify images of many different formats.</p>