Software Development
More about Django · Module 13 - Security hardening

13.2 HTTPS, HSTS and secure cookies

20 min
Back to the curriculum

Video coming soon

The recording for this lesson has not been published yet.

What we cover

  • SECURE_SSL_REDIRECT and proxy headers
  • HSTS, preload and its risks
  • Secure, HttpOnly and SameSite cookies
  • Referrer policy and other security headers
Written notes for this lesson are being prepared. The outline above already shows what the recording will cover.
← 13.1 The deployment checklist 13.3 Content Security Policy with django-csp →

After this lesson you will

  • Force every request onto HTTPS
  • Configure cookies so they cannot leak

Module 13

13.1The deployment checklist 13.2HTTPS, HSTS and secure cookies 13.3Content Security Policy with django-csp 13.4Protecting forms from abuse 13.5Common Django vulnerabilities