Harden Django authentication and security

Implement OWASP-aligned security in Django apps

Hardening Django apps against common web vulnerabilities before production deployment.

• · Django settings
• · authentication config
• · form/API inputs

• · secure middleware stack
• · CSRF/XSS protection
• · auth/authz rules

• · Django security middleware
• · django-cors-headers
• · django-ratelimit

Django project; understanding of threat model; HTTPS in production

CSRF exempt misused; SQL injection via raw queries; weak password policy

• · OWASP alignment
• · production checklist
• · common pitfalls documented