id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
19563	SECRET_KEY ampersands get escaped on startproject	Brandon Carl	nobody	"Just noticed this in 1.4.3.  When you run:

{{{
django-admin.py startproject foo
}}}

The resulting SECRET_KEY in foo/foo/settings.py will have all ampersands escaped to ""&""

To make it more obvious, edit django/core/management/commands/startproject.py:

{{{
        # Line 27
        # Create a random SECRET_KEY hash to put it in the main settings.
        # chars = 'abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*(-_=+)'
        chars = '&'
}}}

Then run the startproject command again and look at the resulting settings.py.

{{{
$ ./django-admin.py startproject foo
$ grep SECRET_KEY foo/foo/settings.py 
SECRET_KEY = '&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'
}}}"	Bug	closed	Core (Management commands)	1.4	Normal	duplicate			Unreviewed	0	0	0	0	0	0