Commit c3eddb05 authored by Evan Simpson's avatar Evan Simpson

Collector #1139: tal:attributes didn't escape double quotes.

parent 04a8ca1e
...@@ -82,6 +82,8 @@ Zope Changes ...@@ -82,6 +82,8 @@ Zope Changes
Bugs fixed Bugs fixed
- Collector #1139: tal:attributes didn't escape double quotes.
- Management interface of TopicIndexes has been completely broken - Management interface of TopicIndexes has been completely broken
- Collector #1129: Improper parsing of ISO8601 in DateTime. - Collector #1129: Improper parsing of ISO8601 in DateTime.
......
...@@ -374,7 +374,7 @@ class TALInterpreter: ...@@ -374,7 +374,7 @@ class TALInterpreter:
elif evalue is self.Default: elif evalue is self.Default:
value = attrEscape(value) value = attrEscape(value)
else: else:
value = escape(value) value = escape(value, quote=1)
value = '%s="%s"' % (name, value) value = '%s="%s"' % (name, value)
return ok, name, value return ok, name, value
bytecode_handlers["<attrAction>"] = attrAction bytecode_handlers["<attrAction>"] = attrAction
......
<a href="valid/link.html" <a href="valid/link.html"
tal:attributes="href python:'/base/' + attrs['href']">blah, blah</a> tal:attributes="href python:'/base/' + attrs['href']">blah, blah</a>
<input tal:attributes="value string:a &quot;laser&quot;" />
<a href="/base/valid/link.html">blah, blah</a> <a href="/base/valid/link.html">blah, blah</a>
<input value="a &quot;laser&quot;" />
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment