What are Django’s built-in security features?

Security against SQL injection, cross-site scripting, cross-site request forgery, and clickjacking are some of the security features ingrained in Django for protecting applications against common vulnerabilities. It has secure password hashing mechanisms and other goodies to follow best practices, such as using HTTPS and not storing sensitive data in cookies. A number of helper utilities are available within the framework that handle user authentication and permission policies, making it relatively easy to build web applications in a secure way.