Secure Coding in Django 4
This course will teach you how to use and implement the OWASP ASVS standards to write code that’s secure against malicious attacks.
What you'll learn
Django provides a great number of functionalities that can help you keep the application and its data safe and secure. In this course, Secure Coding in Django 4, you’ll learn to write a secure application in Django that keeps the sensitive data safe and is resilient to attacks. First, you’ll explore how to properly handle authentication of users and authorization to resources. Next, you’ll discover how to sanitize and manage user input and output over TLS. Finally, you’ll learn how to harden your app by doing all the right configurations and checks to protect it from malicious code. When you’re finished with this course, you’ll have the skills and knowledge of Django and OWASP ASVS principles needed to develop an application that ensures the privacy of the users and keeps their data away from harm.
Table of contents
- Protecting Sensitive Data Using Django 5m
- Demo: Encrypt Sensitive Data in Cookies 3m
- Demo: Encrypt Sensitive Data in Database 2m
- Demo: Cleanup Data from the Browser 3m
- Demo: User's Privacy and Consent Workflow 3m
- Demo: Sending Data in GET vs POST Requests 2m
- Demo: Enforce Secure Protocols for Data in Transit 3m
- Summary 1m
- Impact of Malicious Code on an App 4m
- Verify Dependency Packages 3m
- Detect Outdated and Vulnerable Packages 2m
- Generate SRI Hashes for JS Dependencies 3m
- Hardening Configuration in Production 2m
- Disable Debug Features in Production 2m
- Block Sensitive Information from Headers 2m
- Set Appropriate Security Headers 3m
- Validate HTTP Requests 2m
- Summary 1m
About the author
Sangeeta is a senior backend engineer with over 8 years of experience in developing highly scalable software, some of which are used by millions of users and many of the fortune 500 companies. She has worked with all sort of technology and softwares, ranging from systems programming for mission critical softwares at the RnD division of HPE, to predictive network analysis for a network at Packet Design, then leading development of critical components of Cloud backup softwares at Druva and now del... more