id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 18634 Escaping in the startproject command Marc Tamlyn nobody "The startproject command uses the template language, and seems to be html-escaping various things. For example aviraldg reported on IRC getting a SECRET_KEY with several instances of & in the middle of the string. In this context it's harmless, but it may break other places where & or < are legitimate characters. We should probably render the whole template with escaping disabled." Bug closed Core (Management commands) dev Normal fixed Florian Apolloner Accepted 1 0 1 0 0 0