title: How to prevent XSS attack in django
body: <p>I'm trying to prevent XSS attack in Django, is it ok to use <code>{{ body|escape }}</code> in my HTML file only? How can I do some filtration in the backend? </p>