#19237: The use of > in single or double quoted attributes in strip_tags
-------------------------------------+-------------------------------------
Reporter: chris.khoo@… | Owner:
Type: Bug | khoomeister
Component: Core (Other) | Status: new
Severity: Normal | Version: master
Keywords: | Resolution:
Has patch: 1 | Triage Stage: Ready for
Needs tests: 0 | checkin
Easy pickings: 1 | Needs documentation: 0
| Patch needs improvement: 0
| UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Pablo Recio <pablo.recioquijano@…>):
* status: closed => new
* resolution: fixed =>
Comment:
I just ran out a really basic case where this fails:
{{{
>>> from django.utils.html import strip_tags
>>> strip_tags('<strong>foo</strong><a href="http://example.com";>bar</a>')
u'bar'
}}}
But the result should be 'foobar'. I think this should be fixed for the
1.5 release, should I mark it as blocker?
--
Ticket URL: <https://code.djangoproject.com/ticket/19237#comment:14>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
