changeset 321:8e8d40d50001

Removed too much of the escaping in [333].
author cmlenz
date Wed, 04 Jan 2006 18:47:26 +0000
parents a8b713254286
children bc6285c0e71f
files bitten/trac_ext/web_ui.py
diffstat 1 files changed, 5 insertions(+), 3 deletions(-) [+]
line wrap: on
line diff
--- a/bitten/trac_ext/web_ui.py
+++ b/bitten/trac_ext/web_ui.py
@@ -21,7 +21,8 @@
 import pkg_resources
 from trac.core import *
 from trac.Timeline import ITimelineEventProvider
-from trac.util import pretty_timedelta, format_datetime, shorten_line, Markup
+from trac.util import escape, pretty_timedelta, format_datetime, shorten_line, \
+                      Markup
 from trac.web import IRequestHandler
 from trac.web.chrome import INavigationContributor, ITemplateProvider, \
                             add_link, add_stylesheet
@@ -648,9 +649,10 @@
                         if step != prev_step:
                             if prev_step is not None:
                                 buf.write('</ul>')
-                            buf.write('<p>Step %s failed:</p><ul>' % step)
+                            buf.write('<p>Step %s failed:</p><ul>' \
+                                      % escape(step))
                             prev_step = step
-                        buf.write('<li>%s</li>' % error)
+                        buf.write('<li>%s</li>' % escape(error))
                     buf.write('</ul>')
                     message = Markup(buf.getvalue())
             else:
Copyright (C) 2012-2017 Edgewall Software