--- id: django-quill-editor version: "0.1.42" license: MIT license_treatment: permissive maintenance: dormant --- # django-quill-editor — Integrate Quill editor with Django project. License: permissive · Maintenance: dormant · Downloads: 74.9K/mo ## What it is and what it does django-quill-editor wraps Quill.js, a popular JavaScript rich-text editor, as a Django form field and admin widget. It handles static file inclusion automatically and requires no configuration beyond adding the app to INSTALLED_APPS and using QuillField in your model. The editor works in both regular Django forms and ModelForms, and integrates seamlessly into the Django admin interface. The package is straightforward to set up: add QuillField to a model, register it in admin, and the editor appears. However, the documentation includes a critical security warning: content stored by django-quill-editor is marked as safe HTML by Django and will not be escaped when rendered, creating an XSS vulnerability if untrusted users can edit the content. This makes it suitable only for internal or admin-only use cases where all editors are trusted. Use it for: - Add a rich-text editor to Django admin for trusted staff to compose formatted content without writing HTML. - Build internal content management tools where only authorized users edit formatted text fields. - Create a simple blog or documentation platform with a WYSIWYG editor in ModelForms for authenticated users. - Replace plain textarea fields in Django forms with a visual editor for better user experience in admin-only applications. ## Worth the install? AI-flagged interpretation of the facts above — verify before relying. Integrates Quill.js, a rich-text WYSIWYG editor, into Django forms and admin sites with minimal configuration and no static file setup required. Yes, if you need a Quill editor in Django admin or internal forms and your users are all trusted. The setup is genuinely simple and the install friction is minimal. No if your application accepts user-generated content from the public, because the XSS warning in the documentation is explicit and unresolved—you would need to sanitize output separately, which defeats the convenience of the package. ## Install pip install django-quill-editor uv add django-quill-editor poetry add django-quill-editor ## Installing django-quill-editor Before you install: Low install friction—a single pure-Python dependency on django. Maintenance is dormant: last release was 2024-09-20 and last commit 2025-01-14, so the package is not actively developed but remains functional on current Python and Django versions. License in practice: MIT license is permissive and imposes no significant restrictions on use or redistribution. Quickstart: pip install django-quill-editor # In settings.py INSTALLED_APPS = [ 'django_quill', ] # In models.py from django_quill.fields import QuillField class MyModel(models.Model): content = QuillField() Requires Python >3.8 and Django 3.1 or higher; the package's own documentation warns that content is marked_safe and can be exploited for XSS attacks—only authorized administrators should use it in important projects. Verify before relying: - Whether the package's XSS warning applies only when user input is untrusted or in all contexts where content is displayed. - Current compatibility with Django versions beyond 4.2 (the latest classifier listed). ## Package facts - License: MIT (permissive) - Python support: supports_current - Install friction: low - Maintenance: dormant - Downloads: 74.9K/month (top 15,000 on PyPI) - Known vulnerabilities: none known ## Tags django wysiwyg editor, quill editor django integration, rich text editor django forms, django admin rich text field, django html editor widget, django-admin, wysiwyg-editor, form-widget [View on SkillFed](https://skillfed.io/packages/django-quill-editor) · [View on PyPI](https://pypi.org/project/django-quill-editor/)