Django

Code

Changeset 3775

Show
Ignore:
Timestamp:
09/21/06 08:35:34 (2 years ago)
Author:
mtredinnick
Message:

Fixed #2761 -- Apply escaping to values in form checkbox attributes.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • django/trunk/django/forms/__init__.py

    r3467 r3775  
    640640            field_name = '%s%s' % (self.field_name, value) 
    641641            output.append('<li><input type="checkbox" id="%s" class="v%s" name="%s"%s /> <label for="%s">%s</label></li>' % \ 
    642                 (self.get_id() + value , self.__class__.__name__, field_name, checked_html, 
    643                 self.get_id() + value, choice)) 
     642                (self.get_id() + escape(value), self.__class__.__name__, field_name, checked_html, 
     643                self.get_id() + escape(value), choice)) 
    644644        output.append('</ul>') 
    645645        return '\n'.join(output)