RT @sean_a_cassidy: Don’t use Python’s str.format on untrusted user input: lucumr.pocoo.org/2016/12/29/car… Posted on January 2, 2017 by @thej