Sessions at DjangoCon Europe 2012 about XSS

Monday 4th June 2012

• Building secure Django websites

  by Erik Romijn

  Django helps web developers in many ways, security included. But, it can't and won't handle everything - there's still security issues left that you need to take care of yourself.

  This talk explores some of the most common security issues Django developers can face, with a specific focus on using the features Django already provides to help out. We'll look at how vulnerabilities can be exploited, how exactly Django tries to help and what you still need to take care of yourself.

  If you always enable CSRF in your apps, but don't really know what it does or why, this is the session for you. If you always disable CSRF in your apps, this session may be just in time to save you.

  • Clickjacking
  • CSRF
  • Django
  • Security
  • XSS

  At 3:05pm to 3:50pm, Monday 4th June

  Coverage video write-up slide deck