Menu

#4 Generated HTML doesn't (always?) escape HTML entities

v1.0 (example)
open
nobody
None
5
2015-06-22
2015-06-22
No

Consider a trivial repr method:

def __repr__(self):
  return "<Myclass>"

If this method is involved in a clone, the string "<myclass>" will be inserted into the generated HTML without escaping the "<" and ">" characters.</myclass>

Discussion


Log in to post a comment.

MongoDB Logo MongoDB