Commit c3eddb05 authored by Evan Simpson's avatar Evan Simpson

Collector #1139: tal:attributes didn't escape double quotes.

parent 04a8ca1e
......@@ -82,6 +82,8 @@ Zope Changes
Bugs fixed
- Collector #1139: tal:attributes didn't escape double quotes.
- Management interface of TopicIndexes has been completely broken
- Collector #1129: Improper parsing of ISO8601 in DateTime.
......
......@@ -374,7 +374,7 @@ class TALInterpreter:
elif evalue is self.Default:
value = attrEscape(value)
else:
value = escape(value)
value = escape(value, quote=1)
value = '%s="%s"' % (name, value)
return ok, name, value
bytecode_handlers["<attrAction>"] = attrAction
......
<a href="valid/link.html"
tal:attributes="href python:'/base/' + attrs['href']">blah, blah</a>
<input tal:attributes="value string:a &quot;laser&quot;" />
<a href="/base/valid/link.html">blah, blah</a>
<input value="a &quot;laser&quot;" />
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment