[Quixote-users] SVN: r25291 - trunk/quixote

Neil Schemenauer <nascheme-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]> Thu, 7 Oct 2004 11:17:38 -0400
Newsgroups gmane.comp.web.quixote.cvs
Message-ID <[email protected]>
Author: nascheme
Date: 2004-10-07 11:08:34 -0400 (Thu, 07 Oct 2004)
New Revision: 25291

Modified:
   trunk/quixote/html.py
Log:
Use htmlescape() instead of _escape_string() in htmltag().  This prevents
attribute values from being double escaped.


Modified: trunk/quixote/html.py
===================================================================
--- trunk/quixote/html.py	2004-10-07 13:03:34 UTC (rev 25290)
+++ trunk/quixote/html.py	2004-10-07 15:08:34 UTC (rev 25291)
@@ -79,7 +79,7 @@
         if val is ValuelessAttr:
             val = attr
         if val is not None:
-            r.append(' %s="%s"' % (attr, _escape_string(str(val))))
+            r.append(' %s="%s"' % (attr, htmlescape(val)))
     if xml_end:
         r.append(" />")
     else:

_______________________________________________
Quixote-users mailing list
Quixote-users-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]
http://mail.mems-exchange.org/mailman/listinfo/quixote-users