diff options
| author | Adrian Holovaty <adrian@holovaty.com> | 2006-01-05 16:28:25 +0000 |
|---|---|---|
| committer | Adrian Holovaty <adrian@holovaty.com> | 2006-01-05 16:28:25 +0000 |
| commit | 170c3be4b3019cb9b1476d923bc8ddd5e84c1ebd (patch) | |
| tree | 9a7accdb375f05814d85d00276c9c5149a06dcf5 | |
| parent | 7332b13239072aa8bb8936d02732b5d7ccfffe08 (diff) | |
Changed debug error view to escape the exception value, so that values in angle brackets aren't hidden by browsers
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1825 bcc190cf-cafb-0310-a4f2-bffc1f526a37
| -rw-r--r-- | django/views/debug.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/django/views/debug.py b/django/views/debug.py index c7a4e6bf7d..674d4e4bfd 100644 --- a/django/views/debug.py +++ b/django/views/debug.py @@ -280,7 +280,7 @@ TECHNICAL_500_TEMPLATE = """ <div id="summary"> <h1>{{ exception_type }} at {{ request.path }}</h1> - <h2>{{ exception_value }}</h2> + <h2>{{ exception_value|escape }}</h2> <table class="meta"> <tr> <th>Request Method:</th> |