#jinja

Server-Side Template Injection: Testing the Template Boundary

How I identify server-side template injection, reproduce it in a small Flask lab, and fix the separation between template source and data.