Sankofa Journal Step 14: The Security Pass

Move SECRET_KEY, DEBUG and the database configuration into environment variables and confirm the project still runs. Set DEBUG to False locally for one run and check that you get a plain error page rather than a stack trace, which also means fixing static files. Run check --deploy and work through every warning, either fixing it or writing down why it does not apply. Then grep your templates for |safe and your views for csrf_exempt and mark_safe, and justify every single occurrence or remove it.