Everything worth verifying before a Django site takes real traffic, grouped by what it protects: settings, security headers, the database, …
The 403 that appears after a deploy, behind a proxy, or on a login form. What CSRF protection does, the …
Essential security measures every Django developer should implement to protect their applications from common vulnerabilities.