diff options
| author | Claude Paroz <claude@2xlibre.net> | 2018-07-18 17:32:27 +0200 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2018-07-18 11:35:39 -0400 |
| commit | 430b8254a72767b73816cc6116f439fc6ba656ea (patch) | |
| tree | 850cfda4ea05a1a97111cf291dc9e3d1c26eef6d /docs | |
| parent | 223ba7fa57e79a2e93ed6960f6b2eab14fabd85d (diff) | |
[2.1.x] Added doc links for django.utils.html.escape().
Backport of 6e78e1054933c36a2e0fdf998db780c88bdef4a9 from master
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/ref/contrib/admin/index.txt | 2 | ||||
| -rw-r--r-- | docs/ref/models/fields.txt | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/docs/ref/contrib/admin/index.txt b/docs/ref/contrib/admin/index.txt index 51f694b072..b19bd60719 100644 --- a/docs/ref/contrib/admin/index.txt +++ b/docs/ref/contrib/admin/index.txt @@ -422,7 +422,7 @@ subclass:: Note that this value is *not* HTML-escaped when it's displayed in the admin interface. This lets you include HTML if you so desire. Alternatively you can use plain text and - ``django.utils.html.escape()`` to escape any HTML special + :func:`django.utils.html.escape` to escape any HTML special characters. .. attribute:: ModelAdmin.filter_horizontal diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt index 210619881c..94e299846d 100644 --- a/docs/ref/models/fields.txt +++ b/docs/ref/models/fields.txt @@ -270,7 +270,7 @@ desire. For example:: help_text="Please use the following format: <em>YYYY-MM-DD</em>." Alternatively you can use plain text and -``django.utils.html.escape()`` to escape any HTML special characters. Ensure +:func:`django.utils.html.escape` to escape any HTML special characters. Ensure that you escape any help text that may come from untrusted users to avoid a cross-site scripting attack. |