如何安全运行用户上传代码?

原文: PyCoder's Weekly - Issue #432

• 200805 Zoom.Quiet(大妈) 用时 42 分钟 完成快译
• 200805 Zoom.Quiet(大妈) 用时 37 分钟 完成格式转抄.

• Python 仍缺失 4 种强大功能
  • SERDAR YEGULAP

Python doesn’t have true constants, nor does it implement features like tail recursion optimization that many compiled languages employ. Find out what other features Python is “missing” when compared to other languages, and why the core developers haven’t added these features to the language.

(是也乎:

哪四大?

真常量; 真重载和泛型; 尾递归优化; 多行λ.

简单说, 就是 真LISP 化. )

• 用 Python 自定义 Django Admin
  • REAL PYTHON

In this tutorial, you’ll learn how to customize Django’s admin with Python. You’ll use AdminModel objects to add display columns, calculate values, link to referring objects, and search and filter results. You’ll also use template overriding to gain full control over the admin’s HTML.

(是也乎:

当一件软件系统功能已经无比坚固时, 对其样式进行魔改就变成了显学.

)

• 用 BERT 进行多类文本 深度学习分类
  • SUSAN LI

Want to optimize your chances of getting a conference proposal accepted? A little deep learning might do the trick!

• 用 Rust 编写/发布 Python 模块
  • WILLIAM WOODRUFF

And without any Rust dependencies!

(是也乎:

来了, 终于来了, 今年,类似嗯哼, 一定是爆发式的.

)

• Python 中处理文件的实用课程
  • REAL PYTHON
  • course

In this course, you’ll learn how you can work with files in Python by using built-in modules to perform practical tasks that involve groups of files, like renaming them, moving them around, archiving them, and getting their metadata.

(是也乎:

这在 Python 无比自然.

)

• 异步 Python 中一次完全初始化
  • CHRIS WELLONS

How do you asynchronously initialize a resource in Python? Read the article to learn how to solve this problem and then follow the discussion on Hacker News.

• Django Bugfix 发行版本: 3.0.9 + 2.2.15

  • DJANGO SOFTWARE FOUNDATION

• Django 3.1 发布

  • DJANGO SOFTWARE FOUNDATION

• pip 20.2 发布

  • PYTHON.ORG
  • • Shared by Sumana Harihareswara

(是也乎:

pip 作为唯一可用 Python 模块管理工具, 现在的升级越来越快了.

)

讨论

Discussions

• 如何在我的 Web 应用程序上安全地接受和运行用户代码?
  • STACK OVERFLOW

Not with eval()

(是也乎:

嫑 eval()
嫑 eval()
嫑 eval()

)

文章,教程和嗯哼

Articles, Tutorials and Talks

• 解决 Python 任务排序问题
  • JOHN LEKBERG

Hint: Use Khan’s Algorithm. Or, as one starship captain calls it, Khaaaaaaaaaan’s Algorithm.

(是也乎:

这个算法的名称够屌...

)

• 仅用 3 行 Python 回测交易策略
  • LORENZO AMPIL

Learn how to use Python to test trading strategies against historical data.

(是也乎:

首先这是有前提的...

)

• 十个超棒的 Pythonic 单行解释
  • ANDREAS

Some things in Python are just better on one line.

(是也乎:

每年都有几组类似技巧... 不过, 一打眼看不明白的, 基本上就不是 Pythonic 了.

)

• Python 和 PDF:现行工具回顾
  • JOHANNES FILTER

The ultimate list of PDF tools in Python.

• Python 命名空间和作用域
  • REAL PYTHON

In this tutorial, you’ll learn about Python namespaces, the structures used to store and organize the symbolic names created during execution of a Python program. You’ll learn when namespaces are created, how they are implemented, and how they define variable scope.

(是也乎:

上古教材. )

• The Real Python Podcast – Episode #20: 用 ReportLab 在 Python 中构建 PDF
  • REAL PYTHON
  • podcast

Have you wanted to generate advanced reports as PDFs using Python? Maybe you want to build documents with tables, images, or fillable forms. This week on the show we have Mike Driscoll to talk about his book “ReportLab - PDF Processing with Python.”

(是也乎:

)

• 在 Django 中用 Postgres JSONB 字段
  • KARL HUGHES
  • • Shared by Manuel Weiss

This article walks through the different types of JSON fields, querying JSONB data in Postgres, Django’s support for JSONB, and potential limitations of JSONB fields.

• Wildebeest 介绍,一种 Python 文件处理框架
  • GREG GANDENBERGER
  • • Shared by Greg Gandenberger

好物

Interesting Projects, Tools and Libraries, Projects & Code

• StanfordQuadruped: 基于 Pupper 和 Woofer Raspberry Pi 的机器人代码
  • GITHUB.COM/STANFORDROBOTICSCLUB

(是也乎:

制造一个机械人, 越来越简单了.

Stanford Student Robotics 关键这个实验室,已经开源几十种了...

)

• Ciphey: 自动解密工具
  • GITHUB.COM/CIPHEY

(是也乎:

自动解密, 又一个常用工具

)

• fastquant: 投资策略回测
  • GITHUB.COM/ENZOAMPIL

(是也乎:

开放数据接口一稳定, 类似固化分析的工具也就自然产生了...

)

• oso: 用于授权的开源嵌入式策略引擎

  • GITHUB.COM/OSOHQ

• wildebeest: 文件处理管道

  • GITHUB.COM/SHOPRUNNER

• circuitbreaker: “断路器”模式的Python实现

  • PYPI.ORG

• automagica: 智能机器人过程自动化

  • GITHUB.COM/AUTOMAGICA
  • • Shared by Vekemans

(是也乎:

SRPA 平台, 可以自动化各种复杂的手工任务.

)

📆🐍 活动/大会

Events, MeetUp 真的是全球线下活动组织中心

NIL

• re-learn under COVID-19 如何远程学习?
  • 2020.7.25
  • zoom 会议室

(是也乎:

GDG珠海/疫情之下在线学习/片段/学习吐糟/fm.101.camp 蟒营™电台 钩陈各种值得探讨

部分已发布.

)

DAMA

❤️ Happy Pythonic ;-(大妈私人无责任播报)

101camp11py 已开始报名

课程规划:

    报名截止 2020.08.23
    正式开课 2020.08.30
    课程结束 2020.10.11

详情 => 蟒营™ Python 入门班第11

PS:

• 首发: Issue 432 ~蠎周刊 ~汇集全球蠎事儿 ;-)
• 修订: issue-432.md

好文笔,感叹号年度配额: 1/3

投稿/反馈邮箱:

askdama@googlegroups.com

(邮件列表地址, 当成正常邮件发送邮件就好, 不用注册, 不用翻越...)

ZoomQuiet/大妈

就是四处 是也乎,(￣▽￣) 的那个大妈:

私自嗯哼: ZoomQuiet (订阅号: ZoomQuiet42)
公开课程: 蟒营 (订阅号: Mainium)
历史吐糟: Chaos42 (订阅号 PythoniCamp)

as 创始组织者:
    PyChina (订阅号: PyChinaOrg)
    本地社区: 
        GDG珠海 (订阅号: GDG-ZhuHai)
        TFUG珠海 (订阅号: ZH_TFUG)

NN 4096