SECRET_KEY ampersands get escaped on startproject

[Brandon Carl]

Just noticed this in 1.4.3. When you run:

django-admin.py startproject foo

The resulting SECRET_KEY in foo/foo/settings.py will have all ampersands escaped to "&"

To make it more obvious, edit django/core/management/commands/startproject.py:

        # Line 27
        # Create a random SECRET_KEY hash to put it in the main settings.
        # chars = 'abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*(-_=+)'
        chars = '&'

Then run the startproject command again and look at the resulting settings.py.

$ ./django-admin.py startproject foo
$ grep SECRET_KEY foo/foo/settings.py 
SECRET_KEY = '&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'

[Florian Apolloner]

Fixed in 1.5, see #18634