A client of mine asked me this question. I am not even sure what to reply ? I am no security expert, just a web dev. What can must I say ?
5 Answers
Django is one of the most secure web frameworks. Django provides ways to protect against some common web application vulnerabilities out of the box such as -
- SQL Injection
- CRLF Injection
- Timing Attack
- Clickjacking Attack
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Encrypted connection
I had a similar situation, then I went through official documentation and multiple resources. I gathered and compiled all details here-
https://www.gauravvjn.com/security-in-the-django-application/
Security in Django - By default, Django prevents most common security mistakes: Cross site scripting (XSS) protection Cross site request forgery (CSRF) protection SQL injection protection Clickjacking protection SSL/HTTPS Host header validation
Related