Is there low hanging fruit for the following observation?
The documentation of the python cgi module is vulnerable to XSS
(cross site scripting)
form = cgi.FieldStorage()
First result on google for "tutorial python cgi"
And it is almost the same as the python doc.
I verified that setting ```name=<script>alert(document.domain)</script>```
on the cgi host.
I would expect that devs who read the docs or tutorials will write