How to Stop Decompression Bombs in Python With Hard Output Limits for gzip, Brotli, zstd, ZIP, and tar.gz
A hands-on tutorial that measures how far six compression...
Browse Tag
FastAPI
33 Articles
How to Stop Open Redirects in a FastAPI Login Flow and Check the next Parameter the Way a Browser Reads It
Learn why startswith, urlparse and host-allowlist checks still...
How to Harden a FastAPI Rate Limiter Against Spoofed Client IPs, IPv6 Address Rotation, and Wrong Retry-After Headers
Build a token bucket and a one-number GCRA limiter for FastAPI,...
How to Build a Secure Password Reset Flow in FastAPI and Block Token Guessing, Enumeration, and Host Header Poisoning
Build a password reset flow in FastAPI, break the naive version...
How to Fix CORS Errors in FastAPI Without Letting Every Website Read Your Users’ Data
A step-by-step FastAPI CORS tutorial tested in Edge 155:...
How to Return RFC 9457 Problem Details From a FastAPI API and Stop Error Responses From Leaking Secrets
Build a FastAPI service whose every error, from a missing route...
How to Fuzz-Test a FastAPI API With Schemathesis and Find Server Errors, Missing Auth, and IDOR From Its OpenAPI Schema
A hands-on Schemathesis 4.32.1 tutorial that fuzzes a...
How to Secure File Uploads in a FastAPI App and Stop Disguised, Oversized, and Booby-Trapped Files
Build a FastAPI endpoint that accepts only genuine images, caps...
How to Stop Cross-Tenant Data Leaks in a FastAPI App With PostgreSQL Row-Level Security
Learn to stop cross-tenant data leaks in a FastAPI and...
How to Stop Mass Assignment and Excessive Data Exposure in a FastAPI App
Build a small FastAPI profile API, attack it with eight...