omarelfarsaoui/flask-app repository overview

⁠Flask Demo App (Vulnerable on Purpose)

⁠⚠️ Security Warning

This application is intentionally NOT secure.

• It is built only for learning and demo purposes
• It contains a Server-Side Template Injection (SSTI) vulnerability
• Do NOT deploy it to production, Kubernetes, or any public environment
• Do NOT expose it to the internet

⁠Purpose

This project is meant to demonstrate how SSTI vulnerabilities work in Flask.