Opened 19 years ago

Last modified 18 years ago

#2006 closed task

[patch] admin doesn't html-quote strings in breadcrumbs and filters — at Version 2

Reported by: mhf@… Owned by: Adrian Holovaty
Component: Testing framework Version: new-admin
Severity: major Keywords:
Cc: Triage Stage: Unreviewed
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description (last modified by Adrian Holovaty)

When the admin site uses a models str()-method, it doesn't html-quote it.
For example:

    def __str__(self):
        return '%s <%s>' %(self.name, self.email)

would show up in the admin site as just the name, because my browser thinks <email> is a bad tag.

Change History (3)

by mhf@…, 18 years ago

Attachment: patch.diff​ added

patch

comment:1 by anonymous, 18 years ago

Summary: django admin doesn't quote str()-output in templates. → [patch] admin doesn't html-quote strings in breadcrumbs and filters

comment:2 by Adrian Holovaty, 18 years ago

Description: modified (diff)

(Fixed formatting in description.)

Note: See TracTickets for help on using tickets.
Back to Top