diff options
| author | Adrian Holovaty <adrian@holovaty.com> | 2006-12-07 15:14:35 +0000 |
|---|---|---|
| committer | Adrian Holovaty <adrian@holovaty.com> | 2006-12-07 15:14:35 +0000 |
| commit | 545ebf4395f24438c6ddc847f0794bfc83c6e934 (patch) | |
| tree | 3800deb64798cb84d24acdbe2133db955703845e | |
| parent | 201704be3d04fe8acf0779b129eff09e35681f97 (diff) | |
Improved [4180] to add HTML escaping on the primary-key value in the error message
git-svn-id: http://code.djangoproject.com/svn/django/trunk@4181 bcc190cf-cafb-0310-a4f2-bffc1f526a37
| -rw-r--r-- | django/contrib/admin/views/main.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/django/contrib/admin/views/main.py b/django/contrib/admin/views/main.py index df6b724d07..c9cff0e374 100644 --- a/django/contrib/admin/views/main.py +++ b/django/contrib/admin/views/main.py @@ -314,7 +314,7 @@ def change_stage(request, app_label, model_name, object_id): try: manipulator = model.ChangeManipulator(object_id) except model.DoesNotExist: - raise Http404('%s object with primary key %r does not exist' % (model_name, object_id)) + raise Http404('%s object with primary key %r does not exist' % (model_name, escape(object_id))) if request.POST: new_data = request.POST.copy() |