Hi Andy, a good start is to have a look at chapter 19 in the django book, available online under http://djangobook.com/en/1.0/chapter19/
Additionally, chapter 14 covers Cross-site request forgery http://djangobook.com/en/1.0/chapter14/ Daniel On Thu, Apr 3, 2008 at 9:41 AM, andy baxter <[EMAIL PROTECTED]> wrote: > > hello, > > Is there any documentation online about security issues when using > django? I'm assuming when writing code for my django app that I don't > have to worry about things like quoting strings sent to the database > because the django db api will already do that, but other things I'm not > so sure about, such as whether to check strings that will go into html > for unwanted tags. > > How much of this kind of stuff is done automatically and how much do you > have to think about yourself? It would be nice to have a summary of > security issues in the documentation somewhere. > > andy > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---