Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Flask-Squeeze is a Flask extension that automatically:
pip install Flask-Squeeze
Initialize Flask-Squeeze BEFORE all other extensions and after_request handlers! Flask executes after_request handlers in reverse order of declaration, and the compression should be the last step before sending the response.
from flask_squeeze import Squeeze
squeeze = Squeeze()
def create_app():
app = Flask(__name__)
# Init Flask-Squeeze
squeeze.init_app(app)
# Init all other extensions
# AFTER Flask-Squeeze
return app
Thats it! The responses of your Flask app will now get minified and compressed, if the browser supports it. To control how Flask-Squeeze behaves, the following options exist:
You can configure Flask-Squeeze with the following options in your Flask config:
Option | Default | Description |
---|---|---|
SQUEEZE_COMPRESS | True | Enables or disables compression |
SQUEEZE_MIN_SIZE | 500 | Defines the minimum file size in bytes to activate the compression |
SQUEEZE_VERBOSE_LOGGING | False | Enable or disable verbose logging. If enabled, Flask-Squeeze will print what it does into the terminal in a highlighted color |
SQUEEZE_ADD_DEBUG_HEADERS | False | Add debug infos into the response headers, like call durations and cache hit infos. ONLY USE THIS IN DEVELOPMENT. |
Option | Default | Description |
---|---|---|
SQUEEZE_MINIFY_CSS | True | Enable or disable css minification using rcssmin |
SQUEEZE_MINIFY_JS | True | Enable or disable js minification using rjsmin |
Static files are chached, so they only have to be compressed once. Dynamic files like generated HTML files will not be cached, so they will be compressed for each response.
Option | Default | Description |
---|---|---|
SQUEEZE_LEVEL_BROTLI_STATIC | default=11, min=0 , max=11 | Defines the compression level of brotli for static files |
SQUEEZE_LEVEL_BROTLI_DYNAMIC | default=1, min=0, max=11 | Defines the compression level of brotli for dynamic files |
SQUEEZE_LEVEL_DEFLATE_STATIC | default=9, min=-1 , max=9 | Defines the compression level of deflate for static files |
SQUEEZE_LEVEL_DEFLATE_DYNAMIC | default=1, min=-1, max=9 | Defines the compression level of deflate for dynamic files |
SQUEEZE_LEVEL_GZIP_STATIC | default=9, min=0 , max=9 | Defines the compression level of gzip for static files |
SQUEEZE_LEVEL_GZIP_DYNAMIC | default=1, min=0, max=9 | Defines the compression level of gzip for dynamic files |
FAQs
Compress and minify Flask responses!
We found that flask-squeeze demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.