summaryrefslogtreecommitdiff
path: root/django/utils/xmlutils.py
AgeCommit message (Collapse)Author
2026-06-24Fixed #37183 -- Prevented writing control characters into XML attributes.Jacob Walls
`SimplerXMLGenerator` already rejected control characters (unsupported in XML 1.0) in element content, but attribute values were written unchecked, so unsanitized input could still produce an unparseable XML document. The existing check now runs over attribute values in `startElement()`. This covers both syndication feeds, where item data may flow into attributes such as `Atom` category terms, and the XML serializer, which wraps the error to identify the offending object.
2025-07-23Refs #36500 -- Rewrapped long docstrings and block comments via a script.django-bot
Rewrapped long docstrings and block comments to 79 characters + newline using script from https://github.com/medmunds/autofix-w505.
2022-02-07Refs #33476 -- Reformatted code with Black.django-bot
2019-02-06Fixed #30159 -- Removed unneeded use of OrderedDict.Nick Pope
Dicts preserve order since Python 3.6.
2018-09-26Refs #29784 -- Switched to https:// links where available.Jon Dufresne
2017-06-20Fixed #28324 -- Made feedgenerators write feeds with deterministically ↵Georg Sauthoff
ordered attributes.
2015-06-19Fixed #20197 -- Made XML serializer fail loudly when outputting ↵Claude Paroz
unserializable chars Thanks Tim Graham for the review.
2013-11-02More attacking E302 violatorsAlex Gaynor
2013-10-17Fixed #21270 -- Fixed E701 pep8 warningsAlasdair Nicol
2006-06-03Eliminated lots of mutable default arguments (since they are bugsLuke Plant
waiting to happen and are memory leaks too). git-svn-id: http://code.djangoproject.com/svn/django/trunk@3070 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-07-13Imported Django from private SVN repository (created from r. 8825)Adrian Holovaty
git-svn-id: http://code.djangoproject.com/svn/django/trunk@3 bcc190cf-cafb-0310-a4f2-bffc1f526a37