#35897: Template system: escape() calls in get_exception_info() should be 
removed
-------------------------------------+-------------------------------------
     Reporter:  Klaas van Schelven   |                    Owner:  Klaas van
         Type:                       |  Schelven
  Cleanup/optimization               |                   Status:  assigned
    Component:  Error reporting      |                  Version:  dev
     Severity:  Normal               |               Resolution:
     Keywords:                       |             Triage Stage:  Accepted
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Comment (by Klaas van Schelven):

 I don't fully understand the linked issue, which puts me in dangerous
 waters, but AFAICT in that issue one of the things that was required for
 the problem to exist was user input, incorrectly marked as safe. That
 would mean it doesn't really apply here, since the thing that was
 previously (before my proposed change) being escape was lines of source
 code. Presumably not affected by user input, and also not mark-safe'd.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/35897#comment:5>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/010701931050c368-56b5bd31-2822-42b1-906c-a4e9bcda8f65-000000%40eu-central-1.amazonses.com.

Reply via email to