Opened 19 years ago
Last modified 18 years ago
#2006 closed task
django admin doesn't quote str()-output in templates. — at Initial Version
| Reported by: | Owned by: | Adrian Holovaty | |
|---|---|---|---|
| Component: | Testing framework | Version: | new-admin |
| Severity: | major | Keywords: | |
| Cc: | Triage Stage: | Unreviewed | |
| Has patch: | yes | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description
When the admin site uses a models str()-method, it doesn't html-quote it.
For example:
def str(self):
return '%s <%s>' %(self.name, self.email)
would show up in the admin site as just the name, because my browser thinks <email> is a bad tag.
Note:
See TracTickets
for help on using tickets.
patch