id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
1094	missing html escaping in django admin	Armin Ronacher	Adrian Holovaty	"If you define a !CharField in a model and the django admin displays this in the model overview html isn't escaped.

Ergo this works:
{{{
#!text/html
<script>alert(""blub"");</script>
}}}"	defect	closed	contrib.admin	0.90	critical	invalid			Unreviewed	0	0	0	0	0	0