Django Security Scan

Defensive scan for Django (4.2+/5.x) and Django REST Framework projects. Reports findings using the shared scoring schema.

Scope

• settings.py / settings/*.py
• views.py, class-based views, DRF ViewSets and Serializers
• urls.py, middleware.py, custom managers and querysets
• Templates with {% autoescape off %} / |safe

Procedure

1. Read settings and assess configuration first.
2. Walk views and serializers for permissions and validation.
3. Grep for raw(, extra(, mark_safe, format_html, |safe.

Rules