4 ms·

I don't know why anyone would ever do this since there is no cost to SECRET_KEY = os.urandom... or even just hammering on the keyboard. It is not like you are e

I don't know why anyone would ever do this since there is no cost to SECRET_KEY = os.urandom... or even just hammering on the keyboard. It is not like you are ever going to be challenged for that password? You could even say here is another line of code that will compromise your server: rm -rf /* brb off to search github for SECRET_KEY =

jjnoakes 10y ago
> there is no cost to SECRET_KEY = os.urandom Only if you generate the key up front and use the same value everywhere. If you just call os.urandom in your app, then the cost is every restart (and every separate server instance) invalidates the cookies. Probably not what you want.