id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
5984	debug view does not escape variable values	Michael Radziej	nobody	"In the debug view, variable values (and names) are not escaped.

There's an {{{ {% autoescape off %} }}} in django/views/debug.py, line 415. I don't  understand the reason for it (and then using {{{ |escape }}} afterwards, but not line 449 to display the variables). Changing this to {{{ {% autoescape on %} }}} fixes the bug."		closed	Template system	dev		duplicate	autoescape debug		Unreviewed	0	0	0	0	0	0