About Security Improvements
Be proactive, not reactive about software security:
- Check all inputs and outputs including forms, imports, and exports.
- Don't trust even authenticated users. Their accounts can be stolen.
- Insecure data might also come from the database. Escape all values.
- Don't host the uploaded files without prior verification. Add user quotas for file uploads.
- Remove legacy code and unused software.
- Use secure HttpOnly cookies.
Tips and Tricks Architecture Development Security Django 5.x Django 4.2 Django 3.2
Also by me
Django Paddle Subscriptions app
For Django-based SaaS projects.
Django GDPR Cookie Consent app
For Django websites that use cookies.
