Please see https://www.djangoproject.com/security/.