Django – Strategies for the Python App

Django, as a common framework for quickly building CRUD-style apps that's been successfully implemented in a dynamically-typed language designed for developer productivity, naturally suffers many of the same pitfalls as Rails and shares many of the same weaknesses. Django also holds a strong opinion about RESTful, MVC-centric URL routing, allowing for the same URL hacking discussed in the preceding section. That said, Django provides a lot of great, global protections for common vulnerabilities like CSRF, XSS, and injection attacks out-of-the-box.

Checking for DEBUG = True

It's a forehead-slapping mistake, but still a common one—leaving the Django developer-level...