No, I'm just serializing dicts. Any user input is already in a string, so sanitized. I also usually make helper functions to get/set things in the dict, so I don't operate on the field outside the model often.<p>This snippet is really helpful:
<a href="http://www.djangosnippets.org/snippets/513/" rel="nofollow">http://www.djangosnippets.org/snippets/513/</a>