pip install flask

from flask import Flask
app = Flask(__name__)

@app.route('/')
def hello_world():
    return 'Hello, World!'

if __name__ =="__main__":
    app.run(debug=True, port=8080)

DEBUG=True

from flask import Flask

# from config import DEBUG #该方法可以省略了


app = Flask(__name__)
app.config.from_object('config')


@app.route('/hello')
def hello():
    return 'hello world'


app.run(debug=app.config['DEBUG'])  # 通过字典方式读取

app.run(threaded=True)

from werkzeug.local import LocalStack

s = LocalStack()
s.push(1)
print(s.top)
print(s.top)
print(s.pop())
print(s.top)

s.push(1)
s.push(2)
print(s.top)
print(s.top)
print(s.pop())
print(s.top)

>>>
1
1
1
None
2
2
2
1

import threading, time
from werkzeug.local import LocalStack

my_stack = LocalStack()
my_stack.push(1)
print('Main thread with push value:', str(my_stack.top))


def worker():
    "New thread"
    print('New thread before push with value:', str(my_stack.top))
    my_stack.push(2)
    print('New thread after push with value:', str(my_stack.top))


new_t = threading.Thread(target=worker, name='rick_thread')
new_t.start()
time.sleep(1)
print('Eventually, main thread value:', str(my_stack.top))

>>>
Main thread with push value: 1
New thread before push with value: None
New thread after push with value: 2
Eventually, main thread value: 1

├── __init__.py
├── __main__.py
├── _compat.py
├── app.py
├── blueprints.py
├── cli.py
├── config.py
├── ctx.py
├── debughelpers.py
├── globals.py
├── helpers.py
├── json
│   ├── __init__.py
│   └── tag.py
├── logging.py
├── sessions.py
├── signals.py
├── templating.py
├── testing.py
├── views.py
└── wrappers.py

在使用flask run 命令启动程序
使用旧的app.run() 方法
执行@app.cli.command() 装饰器注册flask命令
使用flask shell命令启动Python Shell

from werkzeug.local import LocalStack
s = LocalStack()
s.push(1)
print(s.top)
print(s.top)  # 获取栈顶元素
print(s.pop())  # 弹出栈顶元素
print(s.top)  # 弹出的栈顶元素会删除

s.push(1)
s.push(2)
print(s.top) 
print(s.top)
print(s.pop())
print(s.pop())

my_stack = LocalStack()
my_stack.push(2)
print('in main thread after push , value is ', my_stack.top)  

def my_work():
    print('in new thread before, value is ', my_stack.top)
    my_stack.push(3)
    print('after new thread after push, value is ', my_stack.top)
new_thread = threading.Thread(target=my_work, name='my_work_thread')
new_thread.start()
time.sleep(1)
print('finally, in new thread , value is', my_stack.top)

>>>
in main thread after push , value is  2
in new thread before, value is  None
after new thread after push, value is  3
finally, in new thread , value is 2

class Local(object):
    __slots__ = ('__storage__', '__ident_func__')

    def __init__(self):
        object.__setattr__(self, '__storage__', {})
        object.__setattr__(self, '__ident_func__', get_ident)
    ...
     def __setattr__(self, name, value):
        ident = self.__ident_func__()
        storage = self.__storage__
        try:
            storage[ident][name] = value
        except KeyError:
            storage[ident] = {name: value}

pipenv install python-dotenv

app = Flask(__name__, static_folder='view_models/statics', static_url_path='')

web = Blueprint('web', __name__, static_folder='', static_url_path='')

template_folder='templates'

├── app
│   ├── __init__.py
│   ├── admin
│   │   ├── __init__.py
│   │   ├── forms.py
│   │   └── views.py
│   ├── home
│   │   ├── __init__.py
│   │   ├── forms.py
│   │   └── views.py
│   ├── modules.py
│   ├── static
│   │   └── __init__.py
│   └── templates
│       ├── admin
│       └── home
├── demo.py
└── manage.py

{{ url_for('static', filename='FILE_PATH') }}

{{ url_for('MODULE_NAME.VIEW_NAME', VARIABLE=PARAMETER) }}

{% block BLOCK_NAME %}
INFO
{% endblock %}

@app.route('/hello')
def hello():
    name = request.args.get('name')
    response = '<h1>Hello, %s!</h1>' % name

http://example.com/hello?name=<script>alert('Bingo!'); </script>

客户端接收的响应会变成为
<h1>Hello, <script>alert('Bingo! '); </script>! </h1>

<script>window.location.href="http://attacker.com";</script>

from jinja2 import escape


@app.route('/hello')
def hell():
    name = request.args.get('name')
    response = '<h1>Hello, %s! </h1>' % escape(name)

pipenv install flask-debugtoolbar

from flask import Flask
from flask_debugtoolbar import DebugToolbarExtension
app = Flask(__name__)
toolbar = DebugToolbarExtension(app)

def create_app(config_name=None):
    if config_name is None:
            config_name = os.getenv('FLASK_CONFIG', 'development')
    app = Flask('bluelog')
    app.config.from_object(config[config_name])
    register_logging(app)
    register_extenstions(app)
    register_blueprints(app)
    register_commands(app)
    register_errors(app)
    register_shell_context(app)
    register_template_context(app)
    return app

def register_logging(app):
    pass

def register_extensions(app):
    bootstrap.init_app(app)
    db.init_app(app)
    ckeditor.init_app(app)
    mail.init_app(app)
    moment.init_app(app)

def register_blueprints(app):
    app.register_blueprint(blog)
    app.register_blueprint(admin, url_prefix='/admin')
    app.register_blueprint(admin, url_prefix='/auth')

def register_shell_context(app):
    @app.shell_context_processor
    def make_shell_context():
        return dict(db=db)

def register_template_context(app):
    pass

def register_errors(app):
    @app.errorhandler(400)
    def bad_request(e):
        return render_template('error/400.html'), 400

def register_commands(app):
    pass