[5.1.x] Added security reporting guidelines.

Backport of 59353360590202fab04067e23214a825157c524b from main.

1 files changed, 10 insertions, 0 deletions

diff --git a/docs/topics/security.txt b/docs/topics/security.txt
index 0f6f05163a..2cc27786d3 100644
--- a/docs/topics/security.txt
+++ b/docs/topics/security.txt
@@ -5,6 +5,16 @@ Security in Django
 This document is an overview of Django's security features. It includes advice
 on securing a Django-powered site.
 
+.. _sanitize-user-input:
+
+Always sanitize user input
+==========================
+
+The golden rule of web application security is to never trust user-controlled
+data. Hence, all user input should be sanitized before being used in your
+application. See the :doc:`forms documentation </topics/forms/index>` for
+details on validating user inputs in Django.
+
 .. _cross-site-scripting:
 
 Cross site scripting (XSS) protection