django-security

Prevent SQL injection in Django by using the built-in ORM and parameterized queries instead of raw SQL string concatenation. This ensures user input is automatically escaped by the framework's query sets.

Configure Django production security by setting DEBUG=False, defining ALLOWED_HOSTS, enforcing secure key management, and applying strict session and cookie policies. Update your settings.py and middleware to enforce these defaults.

Implement Django authentication and authorization by using custom user models, enforcing strong password policies, and applying RBAC or custom permission models. Adopt a least privilege approach for strict data access control.

Enable Django CSRF and XSS protection by activating CSRF middleware, leveraging automatic template output escaping, and setting strict security headers like CSP and X-Frame-Options to prevent web vulnerabilities.

No additional dependencies are required. Secure Django session management and security hardening are achieved by updating standard Django settings and middleware configurations natively supported by the framework.