#25090: Output of password_validators_help_text_html() is not marked safe
------------------------------+--------------------------------------
     Reporter:  alexbecker    |                    Owner:  nobody
         Type:  Bug           |                   Status:  new
    Component:  contrib.auth  |                  Version:  master
     Severity:  Normal        |               Resolution:
     Keywords:                |             Triage Stage:  Unreviewed
    Has patch:  1             |      Needs documentation:  0
  Needs tests:  0             |  Patch needs improvement:  0
Easy pickings:  1             |                    UI/UX:  0
------------------------------+--------------------------------------
Changes (by timgraham):

 * needs_better_patch:   => 0
 * component:  Uncategorized => contrib.auth
 * needs_tests:   => 0
 * needs_docs:   => 0


Comment:

 [https://docs.djangoproject.com/en/1.8/ref/models/fields/#help-text
 help_text] is documented as not being escaped in automatically generated
 forms so it seems to me this shouldn't be necessary. We recently fixed
 some admin templates in 30a152a367541a0b815ab84b3da407700feff744. Are
 there other places where this is a problem?

--
Ticket URL: <https://code.djangoproject.com/ticket/25090#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/068.9e26b07f1b03fd80022a703b0b286637%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to