The story of how I realized I had been disabling the protections Django was providing automatically

Last time, I wrote about how I found an XSS vulnerability in the diff display feature of my English diary app and patched it.