Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions app.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
from flask import Flask, request, jsonify

app = Flask(__name__)

# List of keywords that indicate a request for sensitive information
sensitive_keywords = [".env", "environment variables", "API key", "database credentials"]

@app.before_request
def check_sensitive_requests():
# Check if the incoming request contains any sensitive keywords
for keyword in sensitive_keywords:
if keyword.lower() in request.data.decode('utf-8').lower():
app.logger.warning(f"Rejected request for sensitive information: {request.data}")
return jsonify({"error": "Request for sensitive information is not allowed."}), 403

@app.route('/')
def home():
return "Welcome to the secure application!"

if __name__ == '__main__':
app.run(debug=True)