title: Is it safe to pass Google App Engine Entity Keys into web pages to maintain context?
body: <p>I have a simple GAE system that contains models for Account, Project and Transaction.</p>
  
  <p>I am using Django to generate a web page that has a list of Projects in a table that belong to a given Account and I want to create a link to each project's details page.  I am generating a link that converts the Project's key to string and includes that in the link to make it easy to lookup the Project object.  This gives a link that looks like this:</p>
  
  <pre><code>&lt;a href="/project?key=agxkZAB-bnVpY2VrbXRyDDsSBkNvdXBvbhgBDA"&gt;My Project Name&lt;/a&gt;
  </code></pre>
  
  <ol>
  <li><p>Is it secure to create links like this?  Is there a better way?  It feels like a bad way to keep context.</p></li>
  <li><p>The key string shows up in the linked page and is ugly.  Is there a way to avoid showing it?</p></li>
  </ol>
  
  <p>Thanks.</p>