Bottle VS AIOHTTP

Bottle.py: uber-fast and simple python web microframework, about 3x faster, saner, and more memory-efficient than Flask in my experience: https://github.com/bottlepy/bottle

Fossil: distributed version control and much more in a single executable, from the creators of SQLite: https://fossil-scm.org/

This walkthrough I am using as learning material says the vulnerable code (in the first snippet below, from github here: https://github.com/bottlepy/bottle/issues/900), is replicated in the webpage in the second snippet below and so I know this app is vulnerable to the exploit shown in highlighted in the github link.

Here's a web framework in a single file: bottle.py

I don't do much development for microcontrollers or limited resource environments, but it's nice to have a low boilerplate tool for throwing together quick web apps. I've used Bottle for that in the past. It looks like this might have more of an API focus, rather than templates or static pages? Very cool, will check it out.

However much makes sense for your project. bottle.py is a web framework in a single file, and it's about 4500 lines of code. Should you do the same thing? Probably not. But you can.

There was a time, I want to start a new project and have to choose what technologies to use for the frontend and backend parts as well. Research gets me to Aqueduct and Shelf, both of them weren't looking actively developing and supported and that leads me to the idea to make my own small micro-framework like Echo for Golang or Bottle for Python. And it was easy to decide: I've had time and motivation :)

It was developed by Marcel Hellkamp and Bottle was initially released on July 1 2009 it is cross-platform and open-source. its Github repository is https://github.com/bottlepy/bottle. It is integrated with Python, Vue JS, and Jinja.

> AIOHTTP: The Python int constructor is used to parse Content-Lengths and chunk-sizes, so _, +, and - are misinterpreted.

Fun. I believe the fix is incomplete here[1]. Python's int() constructor accepts integers comprised of any unicode numeral, for example, int("٦٦٦") == 666, and "٦٦٦".isdecimal() == True.

[1] https://github.com/aio-libs/aiohttp/pull/7663/files#diff-197...

aiohttp

If you want speed, I would try to rewrite everything using an asynchronous library like aiohttp.

requests does not support async out-of-the-box, so we will use aiohttp to avoid complications. requests can do the job, and there is no substantial performance difference. But the code is more readable using aiohttp.

I'm using aiohttp to build an API server that sends TCP requests off to a seperate server. The module that sends the TCP requests is synchronous and a black box for my purposes. So my problem is that these requests are blocking the entire API. I need a way to wrap the module requests in an asynchronous coroutine that won't block the rest of the API.

aiohttp - Everything that I need and nothing that I don't.

Use aiohttp to download the content of each page of lists. As of this Code Review post, this is the only step we execute.

Reminds me of this post from 5 months ago, but it was for a Python library. I made a discussion thread on the aiohttp repo and someone ended up contacting the reddit admins about it. The problem seems to be resolved now.