Django, often regarded as to having the batteries included, is a robust app framework that helps developers create and build. This site is built using Django. Here are some thoughts and learnings...
This is a high-level overview of the architecture concerning my Django app. I go over the different components involved in deploying this app to production. Lots of room for improvement, but it is shipped.
In this post, I show what I learned to keep away unsavory HTTP methods.
Yet another security enhancement to make sure the site is safe. This time from clickjacking.
Shedding some light on the CSRF check. This quote suits this article: "The CSRF cookie is used to prevent Cross Site Request Forgeries and is required to protect pages on your site that use unsafe methods, i.e. POST, PUT, and DELETE." -DJ Ceckup
This article is short and drives home the point of why the user login must be accessible strictly by https.
There are a few different ways to configure https strict transport security (HSTS) that I have learned. I share them here in this post.
Another measure to make sure you app is secure when running in production.
There are different ways to enable https for one's site. Here I go over some possibilities and point in the direction of how this would be done.
When one has a Django admin site the first things that should be done is to harden the admin url. This is a straightforward task to beef up your security and reduce your attack surface.
I am learning a lot building my personal site...I take this opportunity to talk about DJ Checkup and how it is helpful when moving to production.