I hate Python 2 and Python 3, but I love Python
Even though the new version is around, people would like to call it “Python 3” which makes it sound like a different language.
This should have been obvious to me for a longer time, but until earlier today I did not really realize the severity of the issues caused by str.format on untrusted user input. It came up as a way to bypass the Jinja2 Sandbox in a way that would permit r...Read more »
It's just too confusing having a completely independent package with the same name.Read more »