Django's security policies

docs.djangoproject.com