id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
2006	[patch] admin doesn't html-quote strings in breadcrumbs and filters	mhf@…	Adrian Holovaty	"When the admin site uses a models __str__()-method, it doesn't html-quote it.
For example:

{{{
    def __str__(self):
        return '%s <%s>' %(self.name, self.email)
}}}

would show up in the admin site as just the name, because my browser thinks <email> is a bad tag."	task	closed	Testing framework	new-admin	major	fixed			Unreviewed	1	0	0	0	0	0