PPedram Badakhchani32m ago · 25 min readRESTful APIs with Django and the Django Rest FrameworkPart 4 - Testing Your API with APITestCase and factory_boy Tested with Django 5.2.19 LTS, Django REST framework 3.18.3, factory_boy 3.3.3 and Python 3.14, on SQLite and PostgreSQL 16, in November 2pedbad.hashnode.dev
AAI Developer1h ago · 14 min readYour RAG Post-Filter Is a Leak: Permission-Aware Retrieval in Django (Part 4)Short version Post-filtering RAG is a leak pattern. Retrieve top-k by similarity, then drop what the user can't see, and you get empty answers for narrow users, restricted text in logs and rerankers,aidevpro.hashnode.dev
AAI Developer2d ago · 17 min readYour MCP Server Is a Second API: How to Add One to Django Without Skipping Row-Level Checks (Part 3)Short version An MCP server is a second API to your data. If its tools run their own queries, they skip every rule your first API enforces. On November 3, a CVE was published for exactly that shape iaidevpro.hashnode.dev
Ooctave Nkurunziza2d ago · 11 min readInvalid Host header after deploying? Why it happens and the fixTL;DR What you get: the exact error each framework prints when it rejects your public address, the one-line fix for each, and a 10-second curl check to catch it before you deploy. Who it's for: anyonoctave.hashnode.dev
AAbhishek Jaiswal4d ago · 8 min readHow to deploy a Django app on OwnkubeA Django app in production needs four things from a host: a real WSGI server in front of it, a Postgres database it can reach, static files served correctly, and a way to run migrations before code thownkube.hashnode.dev
HHassan Aziz4d ago · 9 min readHow to use Tailwind CSS v4 with Django 6, no package neededThe short version You can use Tailwind v4 with Django without an API or a Django package: the Tailwind CLI compiles a CSS file into your app's static folder, and your templates load it with the stati11Ahassanrants.hashnode.dev
AAI DeveloperOct 29 · 19 min readYour AI Agent Doesn't Need a Service Account: Least-Privilege Agent Identity in Django (Part 2)Short version Stop running agents as a service account. It lets the agent do things the person who asked can't, and your audit log can't say who it worked for. Give each agent run its own grant: one 2Aaidevpro.hashnode.dev
AAI DeveloperOct 29 · 16 min readNode2Shell Isn't Just Node: Patch the Brotli RCE (CVE-2026-111497) in Python, Django and Every Runtime You ShipOn October 27, 2026, CISA added CVE-2026-111497 to its Known Exploited Vulnerabilities catalog. The bug has collected three nicknames in a week (Node2Shell, HTTP2Shell and Broccoli2Shell), and most ofaidevpro.hashnode.dev
WWaqas ShahidOct 27 · 2 min readDjango Explained: Python's Batteries-Included FrameworkIntroduction Django is Python's most popular web framework, and its philosophy is the opposite of minimal: "batteries included". Where some frameworks give you a router and leave the rest to third-parpracticaldevblog.hashnode.dev
AAI DeveloperOct 26 · 15 min readHuman-in-the-Loop AI Agents in Django: Approval Gates, Audit Trails, and Evals That Actually ShipHere's the agent demo everyone has seen: a model reads a messy input, calls three tools, and updates your database. Everyone claps. Then someone from compliance asks, "Who approved that change?" and n22Kaidevpro.hashnode.dev
