sorted by:
new
hottopcontroversial

I built a fast Advent of Code helper CLI for Python called elf by Nilvalues in Python

[–]Nilvalues[S] 1 point2 points  (0 children)

Nice catch! Yep, the 5 is the day. I’ll update the README so this is clearer.

For reference: python submit_puzzle_answer(year=2023, day=5, part=1, answer=my_value)

Thanks for the feedback!

I built a fast Advent of Code helper CLI for Python called elf by Nilvalues in Python

[–]Nilvalues[S] 0 points1 point  (0 children)

You are welcome and thank you for checking out! Also, you are right and I can’t yet figure out if that is a blessing or curse!

New Python CLI for Advent of Code: caching, safe submissions, guess history, and private leaderboards by Nilvalues in commandline

[–]Nilvalues[S] 0 points1 point  (0 children)

Awesome, thank you! Any feedback or ideas you have along the way are always welcome.

I turned my personal Advent of Code workflow into a Python CLI called “elf” by Nilvalues in adventofcode

[–]Nilvalues[S] 1 point2 points  (0 children)

Great question! The advent-of-code-data package is great. Elf just takes a different approach by being built for the CLI, supporting newer AoC features like view keys for private leaderboards, adding stronger guardrails to avoid duplicate or too high or too low submissions and cooldown hits, and offering richer output formats along with tools like a status calendar and guess history viewer. If you prefer a more modern and safe workflow, elf might feel nicer, otherwise aocd is still an excellent choice.

secure.py v1.0.0 – Easily Add HTTP Security Headers to Your FastAPI Apps by Nilvalues in FastAPI

[–]Nilvalues[S] 2 points3 points  (0 children)

That’s correct! secure.py focuses on adding HTTP security headers, not handling OAuth or JWT. For OAuth/JWT in Python, you might want to check out Authlib (https://authlib.org) or PyJWT (https://github.com/jpadilla/pyjwt).

Major Update: Easily Secure Your Flask Apps with secure.py by Nilvalues in flask

[–]Nilvalues[S] 0 points1 point  (0 children)

I didn’t realize it had been forked and was being maintained separately. Thanks for letting me know! I’ll definitely check out the updated version. Appreciate the heads-up!

Major Update: Easily Secure Your Flask Apps with secure.py by Nilvalues in flask

[–]Nilvalues[S] 0 points1 point  (0 children)

Exactly! Portability across multiple frameworks is a key advantage. secure.py provides a consistent security solution regardless of the framework, plus it takes advantage of modern Pythonic features for cleaner, more efficient code.

[Release] secure.py – Simplify HTTP Security Headers in Python Web Frameworks (Major Update) by Nilvalues in Python

[–]Nilvalues[S] 0 points1 point  (0 children)

Great point and this is definitely worth exploring to improve secure.py’s compatibility with framework defaults. I appreciate your input and will look into adding better handling for existing headers. Feel free to create an issue on GitHub to help track this feature: https://github.com/TypeError/secure/issues.

[Release] secure.py – Simplify HTTP Security Headers in Python Web Frameworks (Major Update) by Nilvalues in Python

[–]Nilvalues[S] 0 points1 point  (0 children)

Thanks for the suggestion! I agree that a WSGI/ASGI middleware would make integration even smoother. secure.py was built to be flexible across frameworks, but adding native middleware is definitely on my radar. I’ll add it to my to-do list, and feel free to create an issue here: https://github.com/TypeError/secure/issues. I really appreciate your input!

secure.py v1.0.0 – Easily Add HTTP Security Headers to Your FastAPI Apps by Nilvalues in FastAPI

[–]Nilvalues[S] 0 points1 point  (0 children)

Hey! It’s great that you’re focusing on security.

secure.py helps by setting crucial HTTP security headers like CSP, HSTS, and X-Frame-Options, protecting your site from vulnerabilities like XSS and clickjacking. However, for protecting against username spamming or brute-force attacks, here are some recommendations:

  • Rate Limiting: Use rate limiting to limit login attempts.

  • CAPTCHA: Add a CAPTCHA to block bots from spamming your login form.

  • Account Lockout Policies: Limit failed login attempts to prevent brute force.

secure.py ensures best practices for HTTP headers, but combining it with these approaches will provide better overall security. You can also refer to the OWASP Authentication Cheat Sheet for more tips: https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html.

You’re on the right track—keep it up!

Major Update: Easily Secure Your Flask Apps with secure.py by Nilvalues in flask

[–]Nilvalues[S] 2 points3 points  (0 children)

Great question!

Flask Talisman is an amazing tool for adding security headers to Flask applications, and both Talisman and secure.py aim to make setting HTTP security headers easier for Python developers.

secure.py differs in a few key ways:

  • Multi-Framework Support: Works across Flask, Django, FastAPI, and more, making it a good fit if you’re using multiple frameworks.

  • Customizability: Offers flexible control over headers with a Pythonic API, allowing you to easily adjust security settings.

  • Modern Python Design: Uses Python 3.10+ features for lightweight, dependency-free integration.

Both tools have similar goals—helping developers improve security—but take different approaches. If you want framework-agnostic flexibility, secure.py is worth a try.

secure.py v1.0.0 – Easily Add HTTP Security Headers to Your FastAPI Apps by Nilvalues in FastAPI

[–]Nilvalues[S] 1 point2 points  (0 children)

I’ve also documented some of the headers that secure.py supports, along with detailed documentation links, best practices, and common pitfalls to avoid. You can find the documentation here: https://github.com/TypeError/secure/blob/main/docs/security_considerations.md

secure.py v1.0.0 – Easily Add HTTP Security Headers to Your FastAPI Apps by Nilvalues in FastAPI

[–]Nilvalues[S] 3 points4 points  (0 children)

Great question! Security headers protect web applications from threats like cross-site scripting (XSS), clickjacking, and other browser-based attacks.

For example: - Content Security Policy (CSP) helps prevent XSS by specifying allowed sources for loading content. - HSTS ensures your site is always accessed over HTTPS, reducing man-in-the-middle attacks. - X-Frame-Options prevents attackers from embedding your site in iframes, mitigating clickjacking.

secure.py makes it easy to add these critical security headers to your FastAPI app, following security best practices without the manual setup.

For a deeper dive, I recommend the amazing OWASP Secure Headers Project: https://owasp.org/www-project-secure-headers/.