Garito, scanning the mailinglist for "interesting" stuff I found this conversation between Graham and You.
First of all, I work on something big, really big. As I have been working on it for a long time I started to do so with one of the first versions of mod_python, since I based everything around the mod_python's Request object (Passing it around by reference) When development of mod_python stopped I turned to mod_wsgi and I found it not so easy to work with as MP. Everybody kept pointing to frameworks but I do not need one which restricts me and makes me dependable, I need very low level http control and frameworks where directing me in a rebuild of my software. Instead I build my own, basically what I did was building a mod_python compatible middleware (available as MP2MWSGI). So that my application still had the request object I like so much. Older versions of my project running in production for years where "upgraded" from mod_python to mod_wsgi without a single line of code change! Telling you this, I think you understand I had the same issues with security. As being blessed with the fact that I know a lot about security and low level computer communications it was a breeze to search and find possible problems and I have build security into my software from the beginning. Using SQLAlchemy helped me with database security, (SQL Injection can be a pain to protect against). If I can help you on the security subject, go and ask me directly by mail. Martijn On Dec 16, 2011, at 21:51 , Garito wrote: > Hi all! > I'm in the last stage of developing my programming language (?) called > Yanged (I consider it a programming language but not sure at all) > > It's based on mindmaps. I mean I use mindmaps as source code in Yanged > > To test it, I'm developing an ecommerce plataform very basic but good > enought for people who don't need special sell processes and don't > like magnetos and this other tipical more hard ecommerce solutions > > I hope I could finish it next month or sometime near that > > So, I begin to put the security layer to the language but I'm not a > security expert so far > > Here is my question part off topic, part not: could you point me to a > good documentation about security (the off topic?) that talks about > wsgi (the non off topic) in particular? > > Thanks a lot! > > -- > You received this message because you are subscribed to the Google Groups > "modwsgi" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/modwsgi?hl=en. > -- You received this message because you are subscribed to the Google Groups "modwsgi" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/modwsgi?hl=en.
