Skip to content

Z
Zope
Commit 87244ccc authored by Guido van Rossum's avatar Guido van Rossum
Browse files
Options

Properly escape text before writing it.

parent 3ddfe2e7
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 0 deletions
lib/python/TAL/TALInterpreter.py
View file @ 87244ccc
...@@ -157,6 +157,7 @@ class TALInterpreter: ...@@ -157,6 +157,7 @@ class TALInterpreter:
text = self.engine.evaluateText(expr) text = self.engine.evaluateText(expr)
if text is None: if text is None:
return return
text = cgi.escape(text)
self.stream.write(text) self.stream.write(text)
def do_insertStructure(self, expr): def do_insertStructure(self, expr):
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7