diff -Nru python-werkzeug-0.9.6+dfsg/debian/changelog python-werkzeug-0.9.6+dfsg/debian/changelog
--- python-werkzeug-0.9.6+dfsg/debian/changelog	2014-06-10 22:11:57.000000000 +0200
+++ python-werkzeug-0.9.6+dfsg/debian/changelog	2016-09-08 20:22:58.000000000 +0200
@@ -1,3 +1,9 @@
+python-werkzeug (0.9.6+dfsg-1+deb8u1) jessie-proposed-updates; urgency=medium
+
+  * Fix XSS in debugger
+
+ -- Ondřej Nový <onovy@debian.org>  Thu, 08 Sep 2016 20:20:05 +0200
+
 python-werkzeug (0.9.6+dfsg-1) unstable; urgency=medium
 
   * New upstream release
diff -Nru python-werkzeug-0.9.6+dfsg/debian/patches/debugger_xss.patch python-werkzeug-0.9.6+dfsg/debian/patches/debugger_xss.patch
--- python-werkzeug-0.9.6+dfsg/debian/patches/debugger_xss.patch	1970-01-01 01:00:00.000000000 +0100
+++ python-werkzeug-0.9.6+dfsg/debian/patches/debugger_xss.patch	2016-09-08 20:18:11.000000000 +0200
@@ -0,0 +1,11 @@
+--- a/werkzeug/debug/tbtools.py
++++ b/werkzeug/debug/tbtools.py
+@@ -337,7 +337,7 @@
+             'exception':        exc,
+             'exception_type':   escape(self.exception_type),
+             'summary':          self.render_summary(include_title=False),
+-            'plaintext':        self.plaintext,
++            'plaintext':        escape(self.plaintext),
+             'plaintext_cs':     re.sub('-{2,}', '-', self.plaintext),
+             'traceback_id':     self.id,
+             'secret':           secret
diff -Nru python-werkzeug-0.9.6+dfsg/debian/patches/series python-werkzeug-0.9.6+dfsg/debian/patches/series
--- python-werkzeug-0.9.6+dfsg/debian/patches/series	2014-06-10 22:10:38.000000000 +0200
+++ python-werkzeug-0.9.6+dfsg/debian/patches/series	2016-09-08 20:16:42.000000000 +0200
@@ -1,3 +1,4 @@
 drop_ubuntu_font.patch
 13218de4.patch
 0bad0c25.patch
+debugger_xss.patch