I wound up forking the (outdate package, django-html_sanitizer) and merged a bunch of changes some other forks had that brought it up to 3.6+ standards. It worked. This suggests to me upgrading old ...