0:48:23
Practical Django Secuirty
DjangoCon US 2014 · September 11, 2014
Secure Django applications by being explicit and conservative: treat user input as data, use parameterized queries and output escaping, centralize authentication and authorization, whitelist ModelForm fields, and restrict views to the HTTP methods they actually support. Prefer widely reviewed controls and Django’s built-in security features…