query_pk_and_slug
If True, causes get_object() to perform its lookup using both the primary key and the slug. Defaults to False.
This attribute can help mitigate insecure direct object reference attacks. When applications allow access to individual objects by a sequential primary key, an attacker could brute-force guess all URLs; thereby obtaining a list of all objects in the application. If users with access to individual objects should be prevented from obtaining this list, setting query_p