#16684: BaseForm needs to escape the 'class' attribute value
---------------------------+------------------------------------
     Reporter:  dtrebbien  |                    Owner:  nobody
         Type:  Bug        |                   Status:  new
    Component:  Forms      |                  Version:  1.3
     Severity:  Normal     |               Resolution:
     Keywords:             |             Triage Stage:  Accepted
    Has patch:  1          |      Needs documentation:  0
  Needs tests:  1          |  Patch needs improvement:  0
Easy pickings:  0          |                    UI/UX:  0
---------------------------+------------------------------------

Comment (by mlavin):

 {{{ conditional_escape }}} is not appropriate for this issue and this test
 is not correct. Using the example from the CSS spec, {{{
 conditional_escape }}} would convert {{{ B&W }}} to {{{ B&W }}} not
 the correct {{{ B\&W }}}. The test currently converts the class name {{{
 \&required }}} to {{{ \\&required }}} which is not a valid class name.

 To handle this there would need to be another escape function for handling
 css escaping rules. It seems as though it developers choose to use these
 characters in their css they can handle the escaping themselves. I don't
 see why this would need to be a part of Django.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/16684#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to