id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
2152	[patch] Username is not escaped in django admin	Sergey Kirillov <rushman@…>	Adrian Holovaty	If you set your user first name to '<script>alert(1)</script>' you will get JS alert for each django admin page.	defect	closed	contrib.admin		normal	fixed		Sergey Kirillov <rushman@…>	Unreviewed	1	0	0	0	0	0