This also happens with the latest web2py version 2.18.5 I've opened an issue here: https://github.com/web2py/web2py/issues/2182
On Wednesday, April 17, 2019 at 2:54:00 PM UTC+2, Leonel Câmara wrote: > > Please open an issue, you're right, this is a bug and a security problem, > it's also very easy to fix by simply copy pasting escapejs from django. > -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.

