#3419: exception value not html-escaped in exception view
-----------------------------+----------------------------------------------
Reporter:  [EMAIL PROTECTED]  |       Owner:  jacob        
  Status:  new               |   Component:  Uncategorized
 Version:  0.95              |    Keywords:               
   Stage:  Unreviewed        |   Has_patch:  0            
-----------------------------+----------------------------------------------
 when raising an exception whose exception value contains html metachars
 like "<", these are not properly escaped in the exception view.
 
 example:
 {{{
 # Create your view here.
 from myapp.models import mydbobject
 function throwexc(request):
     raise Exception, mydbobject.objects.all()
 }}}
 
 gives you:
 {{{
 Exception at /throwexc/
 [<foo>, <bar>]
 Request Method: GET
 Request URL: http://localhost:8000/throwexc/
 Exception Type: Exception:
 Exception Value: [, ]
 }}}
 ([, ] having html source code [<foo>, <bar>])

-- 
Ticket URL: <http://code.djangoproject.com/ticket/3419>
Django Code <http://code.djangoproject.com/>
The web framework for perfectionists with deadlines
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to