#18634: Escaping in the startproject command
--------------------------------------------+--------------------
Reporter: mjtamlyn | Owner: nobody
Type: Bug | Status: new
Component: Core (Management commands) | Version: master
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
--------------------------------------------+--------------------
The startproject command uses the template language, and seems to be html-
escaping various things. For example aviraldg reported on IRC getting a
SECRET_KEY with several instances of & in the middle of the string.
In this context it's harmless, but it may break other places where & or <
are legitimate characters. We should probably render the whole template
with escaping disabled.
--
Ticket URL: <https://code.djangoproject.com/ticket/18634>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/django-updates?hl=en.
