Django Security Tips

Published: April 16, 2020, 10:31 a.m.

Tip 1. Carefully handle user uploads If your web application allows users to upload files, you are opening yourself to an attack vector and the upload logic should, therefore, be handled carefully. It is important to validate all uploaded files to be sure they are what you expect (for instance, an image file and not a PHP script!) If your site accepts file uploads, it is strongly advised that you limit these uploads in your Web server configuration to a reasonable size in order to prevent denial of service (DOS) attacks.


The other tips only in the audio version.


Apple Podcasts - https://link.chtbl.com/Apple_Podcasts

Spotify - https://link.chtbl.com/8_-EyCh1

Google Podcasts - https://link.chtbl.com/kQr7HKma

Castbox - https://link.chtbl.com/rVlRcBZN


Recommendation: https://www.freecodecamp.org/news/complete-back-end-system-with-serverless/


Sources:

https://docs.djangoproject.com/en/3.0/topics/security/

https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/

https://snyk.io/blog/django-security-tips/