4 ms·
For those wondering about 'the second bug', I'm going to suggest that it's the lack of class Meta: fields = ('only', 'whitelisted', 'fields') whic
by shabble 14y ago
For those wondering about 'the second bug', I'm going to suggest that it's the lack of
class Meta:
fields = ('only', 'whitelisted', 'fields')
which defaults the form to exposing all the model fields for modification, allowing naughtyness not unlike the Rails mass-assignment issues that cropped up a while back.
Or maybe the name field having blank=True, but no default value?
- pydanny 14y agoNope! What you are talking about falls under "best practice" and not a bug. It's very good that you bring it up though! For what it's worth, every technical reviewer we had insisted that we cover the issue of fields vs excludes. :-) Also, blank fields don't require defaults.