Two Scoops of Django Study - Session 8

Chapter 11 covered the basics of Django forms. We confirmed that rather than stacking up custom code, the most efficient approach to validating input data is to make use of the validation framework Django provides.

In particular, we emphasized actively using ModelForm, and always applying CSRF protection to any HTTP form that changes data. We covered how using CsrfViewMiddleware means you don't have to attach csrf_protect to every single view individually, and also looked at how to add errors to a form using Form.add_error().

During the deep-dive session, we looked at case examples of why CSRF (Cross-site request forgery) is dangerous, and examined in code how Django implements defenses against it in django/middleware/csrf.py. By understanding what role the CSRF-related code we habitually add actually plays, we came away with a clearer sense of Django's built-in defense mechanisms.

The study group has been running for about 2 months now, and we've made it through Chapter 11 out of a total of 35 chapters, roughly 1/3 of the way through. In our mid-study retrospective, we noted the following as particularly good points:

• We've kept the study going without dropping out partway through.
• We can ask senior developers questions and get more in-depth answers.
• Even those majoring in frontend can get indirect experience with backend.
• It helps us not lose the feel for Django we used to have.
• We can apply what we learn directly to personal projects.
• As new developers, we can study what we need before taking on bigger responsibilities.
• We've developed the habit of opening up the Django source code ourselves.

On the downside, some felt the pace was slow, so going forward we plan to trim the book summary portion down to around 10 minutes or so and spend more time on deep-dive learning. For team projects, instead of splitting into separate groups, we decided the whole study group should participate together, and the idea came up of increasing motivation by choosing a theme like building a study management service.

Finally, from the perspective of a newly employed developer just starting their first job, being able to get to know future colleagues in advance through this kind of study was noted as being highly meaningful. It closed with the reflection that what matters more than a company's image is who you actually end up working with, and a commitment to keep growing steadily and become a colleague who contributes to the team.