Queryset Filtering
get_queryset() narrows results per-request, while filter backends translate query parameters declaratively: django-filter's FilterSet maps params to ORM lookups, SearchFilter builds icontains queries across configured fields, and OrderingFilter whitelists sortable columns. Whitelisting filterable and orderable fields is a security boundary, not a convenience.
This Concept is waiting for its first lesson!
get_queryset() narrows results per-request, while filter backends translate query parameters declaratively: django-filter's FilterSet maps params to ORM lookups, SearchFilter builds icontains queries across configured fields, and OrderingFilter whitelists sortable columns. Whitelisting filterable and orderable fields is a security boundary, not a convenience.
Are you a teacher? Sign in to start contributing.
Sign In