[web2py] OWASP Top 10 web app vuln # 10

Hey, I know this has been discussed before, but this issued is now in the OWASP top ten web application vulnerabilities https://www.owasp.org/index.php/Top_10_2010-A10 . The vulnerability is the feature ?_next=. One way this good be exploited according to the vulnerability is a attacker gives

[web2py] SQLFORM list bug's

Hey, There are quite a few bugs in SQLFORM when having a field of type 'list' (so 'list:string', 'list:integer'). First one being when you submit and form and there are error's with other fields. def error_form(): form = SQLFORM( Field('string', '