Ticket #4131: addslash_escape.diff

django/template/defaultfilters.py

@@ -47 +47 @@
 
 def addslashes(value):
     "Adds slashes - useful for passing strings to JavaScript, for example."
-    return value.replace('\\', '\\\\').replace('"', '\\"').replace("'", "\\'")
+    maps = (
+        ('\\', '\\\\'),
+        ('"', '\\"'),
+        ("'", "\\'"),
+        ('\n', '\\n'),
+        ('\r', ''),
+        ('\b', '\\b'),
+        ('\f', '\\f'),
+        ('\t', '\\t'),
+        ('\v', '\\v'),
+        ('</', '<\\/'),
+        )
+
+    for bad, good in maps:
+        value = value.replace(bad, good)
+    return value
 addslashes = stringfilter(addslashes)
 
 def capfirst(value):