Server-Side Template Injection: Exploiting Tornado Templates — SSTI Labs

[Write-up] Server-Side Template Injection (Code Context) in Tornado Templates.