Ticket #29800: doc_update.diff

docs/topics/security.txt

@@ -281 +281 @@
   list`_ which identifies some common vulnerabilities in web applications. While
   Django has tools to address some of the issues, other issues must be
   accounted for in the design of your project.
+* Django's dev server (as well as other application servers such as Gunicorn)
+  are vulnerable to `slow loris attacks`_. For this reason it is recommended
+  to use a reverse proxy (`like nginx`_) for your deployment.
 
 .. _LimitRequestBody: https://httpd.apache.org/docs/2.4/mod/core.html#limitrequestbody
 .. _Top 10 list: https://www.owasp.org/index.php/Top_10-2017_Top_10
+.. _slow loris attacks: https://en.wikipedia.org/wiki/Slowloris_(computer_security
+.. _like nginx: https://uwsgi.readthedocs.io/en/latest/tutorials/Django_and_nginx.html#basic-nginx