I don't know how to reproduce, but this is a case where it immediatly becomes ovious that we didn't validate user input. edit_fields is extracted from the request object and assumed that it's a string ...

I used developed this project in Ubuntu 24.04.2, running in WSL, and VSCode. Django was installed in a virtual environment, as shown in the tutorial linked above ...