ignace/flowers
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

more readme

Browse Source
This commit is contained in:
ignace
2026-07-18 19:39:18 +02:00
parent 9c726e49d4
commit f9dc885937
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
-1
View File
@@ -215,7 +215,6 @@ The files `test.py`, `test_fernet.py`, `import.py`, and `dumpl.py` are ad-hoc sc
Before any serious deployment, at minimum: Before any serious deployment, at minimum:
1. Remove `db.sql`, `pins.csv`, and embedded credentials from version history, then rotate every exposed or recoverable credential.
2. Move the Flask secret key, provisioning database password, database name/host, and filesystem paths to environment-based configuration. 2. Move the Flask secret key, provisioning database password, database name/host, and filesystem paths to environment-based configuration.
3. Replace string-formatted SQL with parameterized queries and validate table/account identifiers. 3. Replace string-formatted SQL with parameterized queries and validate table/account identifiers.
4. Replace the current password-to-Fernet-key construction with a password KDF such as Argon2id, scrypt, or PBKDF2 using a unique salt and appropriate work factor. 4. Replace the current password-to-Fernet-key construction with a password KDF such as Argon2id, scrypt, or PBKDF2 using a unique salt and appropriate work factor.