The Unicorn framework up to and including 0.35.3 for Django allows XSS via component.name.
django-unicorn unicorn