id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 25090 Output of password_validators_help_text_html() is not marked safe Alex nobody The output of password_validation.password_validators_help_text_html() in the SetPasswordForm and AdminChangePasswordForm is not wrapped in mark_safe, which causes the html tags in the output to be escaped. Bug closed contrib.auth dev Normal wontfix Unreviewed 1 0 0 0 1 0