﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
3419	exception value not html-escaped in exception view	webograph@…	nobody	"when raising an exception whose exception value contains html metachars like ""<"", these are not properly escaped in the exception view.

example:
{{{
# Create your view here.
from myapp.models import mydbobject
function throwexc(request):
    raise Exception, mydbobject.objects.all()
}}}

gives you:
{{{
Exception at /throwexc/
[<foo>, <bar>]
Request Method: GET
Request URL: http://localhost:8000/throwexc/
Exception Type: Exception:
Exception Value: [, ]
}}}
([, ] having html source code [<foo>, <bar>])"		closed	Uncategorized	0.95		fixed			Accepted	0	0	0	0	0	0
