{"categories":[{"label":"Dynamic Content","url":"https://skillfed.io/packages/category/internet-www-http-dynamic-content/4"}],"enrichment":{"capability":"Integrates Quill.js, a rich-text WYSIWYG editor, into Django forms and admin sites with minimal configuration and no static file setup required.","skillfed_tags":["django-admin","wysiwyg-editor","form-widget"],"use_cases":["Add a rich-text editor to Django admin for trusted staff to compose formatted content without writing HTML.","Build internal content management tools where only authorized users edit formatted text fields.","Create a simple blog or documentation platform with a WYSIWYG editor in ModelForms for authenticated users.","Replace plain textarea fields in Django forms with a visual editor for better user experience in admin-only applications."],"what_it_does":"django-quill-editor wraps Quill.js, a popular JavaScript rich-text editor, as a Django form field and admin widget. It handles static file inclusion automatically and requires no configuration beyond adding the app to INSTALLED_APPS and using QuillField in your model. The editor works in both regular Django forms and ModelForms, and integrates seamlessly into the Django admin interface.\n\nThe package is straightforward to set up: add QuillField to a model, register it in admin, and the editor appears. However, the documentation includes a critical security warning: content stored by django-quill-editor is marked as safe HTML by Django and will not be escaped when rendered, creating an XSS vulnerability if untrusted users can edit the content. This makes it suitable only for internal or admin-only use cases where all editors are trusted.","worth_installing":"Yes, if you need a Quill editor in Django admin or internal forms and your users are all trusted. The setup is genuinely simple and the install friction is minimal. No if your application accepts user-generated content from the public, because the XSS warning in the documentation is explicit and unresolved\u2014you would need to sanitize output separately, which defeats the convenience of the package."},"id":"django-quill-editor","links":{"html":"https://skillfed.io/packages/django-quill-editor","md":"https://skillfed.io/packages/django-quill-editor.md","pypi":"https://pypi.org/project/django-quill-editor/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2024-09-20","license_spdx":null,"license_treatment":"permissive","name":"django-quill-editor","python_support":"supports_current","summary":"Integrate Quill editor with Django project."},"popularity":{"monthly_downloads":74929,"position":14767,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.1.42"}