安全な Web インターフェイスの構築: Linux サーバーのベスト プラクティス。

from flask import Flask
from flask_sslify import SSLify

app = Flask(__name__)
sslify = SSLify(app)

@app.route('/')
def hello():
    return 'Hello, World!'

if __name__ == '__main__':
    app.run()

from flask import Flask
from flask_httpauth import HTTPBasicAuth

app = Flask(__name__)
auth = HTTPBasicAuth()

users = {
    'admin': 'password', 
    'user': 'password2'
}

@auth.get_password
def get_password(username):
    if username in users:
        return users.get(username)
    return None

@app.route('/')
@auth.login_required(role='admin')
def hello_admin():
    return 'Hello, Admin!'

@app.route('/')
@auth.login_required(role='user')
def hello_user():
    return 'Hello, User!'

if __name__ == '__main__':
    app.run()

const userInput = "<script>alert('XSS Attack');</script>";
const filteredInput = escapeHtml(userInput);

function escapeHtml(unsafe) {
    return unsafe.replace(/&/g, "&")
        .replace(/</g, "<")
        .replace(/>/g, ">")
        .replace(/"/g, """)
        .replace(/'/g, "&#039;");
}

# Debian/Ubuntu
sudo apt update
sudo apt upgrade

# CentOS/RHEL
sudo yum update
sudo yum upgrade