Ticket #4991: 4991.diff

File 4991.diff, 614 bytes (added by Tim Graham, 10 years ago)

  • docs/ref/models/fields.txt 

    diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt
index d66ee37..0466534 100644
    a b desire. For example::  
    260260    help_text="Please use the following format: <em>YYYY-MM-DD</em>."
    261261
    262262Alternatively you can use plain text and
    263 ``django.utils.html.escape()`` to escape any HTML special characters.
     263``django.utils.html.escape()`` to escape any HTML special characters. Ensure
     264that you escape any help text that may come from untrusted users to avoid a
     265cross-site scripting attack.
    264266
    265267``primary_key``
    266268---------------
Back to Top