Resources

Frameworks

• aiohttp - Asynchronous HTTP client/server framework for asyncio and Python
• Bottle - A fast and simple micro-framework for python web-applications.
• CherryPy - A pythonic, object-oriented HTTP framework.
• Django - The Web framework for perfectionists with deadlines.
• Falcon - A bare-metal Python web API framework for building high-performance microservices, app backends, and higher-level frameworks.
• Flask - The Python micro framework for building web applications.
• hug - Embrace the APIs of the future. Hug aims to make developing APIs as simple as possible, but no simpler.
• Masonite - The Modern And Developer Centric Python Web Framework.
• Pyramid - A Python web framework
• Quart - A Python ASGI web microframework.
• Responder - A familiar HTTP Service Framework
• Sanic - An Async Python 3.5+ web server that’s written to go fast
• Starlette - The little ASGI framework that shines. ✨
• Tornado - A Python web framework and asynchronous networking library, originally developed at FriendFeed.

General

• OWASP - Secure Headers Project
• OWASP - Session Management Cheat Sheet
• Mozilla Web Security
• securityheaders.com

Policies

• CSP: CSP Cheat Sheet | Scott Helme, Content-Security-Policy | MDN, Content Security Policy Cheat Sheet | OWASP, Content Security Policy CSP Reference & Examples
• XXP: X-XSS-Protection | MDN
• XFO: X-Frame-Options | MDN
• HSTS: Strict-Transport-Security | MDN, HTTP Strict Transport Security Cheat Sheet | OWASP
• Referrer: A new security header: Referrer Policy | Scott Helme, Referrer-Policy | MDN
• Feature: A new security header: Feature Policy | Scott Helme, Feature-Policy | MDN, Introduction to Feature Policy | Google Developers
• Cache: Cache-Control | MDN