About Security Improvements

Be proactive, not reactive about software security:

  • Check all inputs and outputs including forms, imports, and exports.
  • Don't trust even authenticated users. Their accounts can be stolen.
  • Insecure data might also come from the database. Escape all values.
  • Don't host the uploaded files without prior verification. Add user quotas for file uploads.
  • Remove legacy code and unused software.
  • Use secure HttpOnly cookies.

Tips and Tricks Architecture Development Security Django 4.2 Django 3.2 Django 2.2