Audit required: Potential SQL injection on RawSQL function BAN-B611
Security
Minor
a03
owasp top 10
Use of extra in Django querysets should be audited, since unsanitized strings can open up security vulnerabilities.