Hi,
We started migrating a java project to Django .Our present code we are using different filters for security. Mainly we are checking below filters
· Session hijacking check
· XSS attach check
· CSRF check
· Path manipulation check(directory traversal attack)
· Access controller check
When I go through Django security documents ,I come across CSRF ,Session and XSS security. I would like to know remaining security checks are already implemented in Django or we need to add our own check condition. We are not using Django templates for GUI .If we are adding angularJS for GUI, do we need to handle XSS security separately .
Regards,
Jerrina