Django Design Patterns and Best Practices: Industry-standard web development techniques and solutions using Python, 2nd Edition

by Arun Ravindran

os.system("ls -l {}".format(filename)) An attacker can enter the filename as manage.py; rm -rf * and delete all the files in your directory. In

Basic example of shell injection