Hands-on Django 6.0: Template Partials, Background Tasks, CSP Security — Experience Report on Three Major Features

Preface

The previous article said I would refocus on Django

Part of the reason is that several new features in Django 6.0 are quite good.

Sorry, I didn't double-check—I got one thing wrong: Django 6.0 has no built-in WebSocket support 🤣

That said, Django 6.0 still brings many nice new features and improvements. After a day's work, I've upgraded the DjangoStarter framework to Django 6.0 and put the new features to use.

This article will briefly introduce the features of this major Django release; I'll cover them in more detail when the next version of DjangoStarter comes out.

Django 6.0

https://docs.djangoproject.com/en/6.0/releases/6.0/

Django 6.0 was released in December 2025, bringing a series of modern tools and improvements. This update mainly focuses on improving the developer experience, especially support for modern web development patterns (such as HTMX), enhanced security, and native background task handling.

Supported Python versions: 3.12, 3.13, 3.14.

Core Features (Headline Features)

1. Template Partials

The Django template language now natively supports template partials. This feature lets developers define and reuse named HTML fragments in the same template file, greatly simplifying component-based development, especially for scenarios that use libraries like HTMX.

• Main change: Introduced the {% partialdef %} and {% partial %} tags.
• Advantage: You no longer need to create a separate file just to reuse a small piece of HTML, nor depend on a third-party package (such as django-template-partials).

2. Built-in Background Tasks

Django 6.0 introduces a native background task framework that lets you run code outside the HTTP request-response cycle.

• Functionality: You can define and run background tasks directly in Django, for time-consuming operations such as sending email and data processing.
• Significance: Reduces dependence on heavy external task queues like Celery, and is more friendly for small-to-medium projects or simple task scenarios.

3. Native CSP Support

Security is further enhanced with built-in support for Content Security Policy (CSP).

• Configuration: Configure via the SECURE_CSP and SECURE_CSP_REPORT_ONLY settings (Python dict format is supported).
• Middleware: Provides ContentSecurityPolicyMiddleware to automatically add CSP headers.
• Flexibility: Supports using nonces via the csp() context processor, and provides decorators to override or disable the policy at the view level.

Other Important Improvements (Other Improvements)

Modernized Email API

Django 6.0 adopts Python's modern email API and updates the internal email handling mechanism, making it more robust and aligned with modern standards.

Async Enhancements

• Added the AsyncPaginator and AsyncPage classes, further rounding out the ecosystem for async views and database operations.

Database and GIS

• Expanded StringAgg support: The StringAgg aggregate function is no longer limited to PostgreSQL and now supports more database backends.
• GIS enhancements: Added new geometry functions and lookups.

Upgrade Notes

• Django 6.0 no longer supports Python 3.11 and below.
• Many features marked as deprecated in the Django 5.x series have been formally removed in 6.0. Please consult the official migration guide before upgrading.