Ensuring that the sites you build are secure is of the utmost importance to a professional web applications developer.
The Django framework is now very mature and the majority of common security issues are addressed in some way by the framework itself, however no security measure is 100% guaranteed and there are new threats emerging all the time, so it's up to you as a web developer to ensure that your websites and applications are secure.
web security is too large a subject to cover in depth in a single book chapter. This chapter includes an overview of Django's security features and advice on securing a Django-powered site that will protect your sites 99% of the time, but it's up to you to keep abreast of changes in web security.
For more detailed information on web security, Django's archive of security issues(for more information visit https://docs.djangoproject.com/en/1.8/releases/security/) is a good place to start, along with Wikipedia's web application...