#25872: Title attribute for related widget links lacks escaping (and breaks
html)
---------------------------------+------------------------------------
Reporter: a1tus | Owner: nobody
Type: Bug | Status: new
Component: contrib.admin | Version: 1.8
Severity: Release blocker | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
---------------------------------+------------------------------------
Comment (by a1tus):
I mean, in translation files we don't usually know where this string will
be used. It can be used in python or printed as text/html as always or
like in our case in some html attribute. So responsibility about escaping
must be taken by the one who knows the context. In this particular case I
think that's our template file.
--
Ticket URL: <https://code.djangoproject.com/ticket/25872#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/063.36eb917720ec05e2408f5a7341be59a8%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
