using django apps vs established apps…security?

问题:

Ive been making a site in django and thinking about using some of the apps available online for things like wiki or forum. I was wondering what the drawbacks were. Are those apps likely to be less secure that using something like vbulletin or mediawiki instead?

In general is django pretty secure to begin with? I know almost nothing about security so I find myself wondering sometimes.

回答1:

vBulletin and MediaWiki are pretty insecure apps. I think typical django app is much more secure than these two :-)

Django by default prevents many security mistakes (SQL injection, xss, csrf) so developer should make an effort to create insecure app.