0:34:40
A Pentester's Thoughts on Django Security
DjangoCon Europe 2020 · October 15, 2020
Pascal Uter argues that Django is reassuringly secure because its history consistently favors security over developer convenience: secure template escaping, CSRF protection, safer defaults for cookies and headers, password validation, safer session serialization, and careful fixes such as removing password-reset tokens from referrers. He explains…