django-security

Django security settings for production deployment require HTTPS enforcement, secure cookies, robust security headers, and safe secret management. This Skill provides concrete patterns to harden your project configuration against common web vulnerabilities.

Role-based access control in Django is implemented using proper user models, permissions, and authorization patterns. This Skill provides authentication and authorization best practices to restrict access based on defined user roles.

Django CSRF protection works by validating secure tokens in POST requests to prevent cross-site forgery. This Skill guides you through configuring production-ready CSRF middleware and secure cookies to enforce this protection.

Preventing SQL injection and XSS in Django involves applying built-in query escaping and secure template rendering. This Skill demonstrates safe coding patterns and configurations to mitigate these common injection attacks.

You can apply these Django security patterns to an existing application by reviewing and updating your current settings. The Skill provides guidelines for proper middleware usage and hardened configurations across Django projects.