Provided values are not always strings (int, Messages, ...) but they will...

Provided values are not always strings (int, Messages, ...) but they will anyway get cast into strings in Formulator's render_element. So always cast before escaping.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@20946 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Form/FormulatorPatch.py

@@ -611,14 +611,14 @@ def SingleItemsWidget_render_items(self, field, key, value, REQUEST):
 
 
       if item_value == value and not selected_found:
-          rendered_item = self.render_selected_item(escape(item_text),
+          rendered_item = self.render_selected_item(escape(str(item_text)),
                                                     item_value,
                                                     key,
                                                     css_class,
                                                     extra_item)
           selected_found = 1
       else:
-          rendered_item = self.render_item(escape(item_text),
+          rendered_item = self.render_item(escape(str(item_text)),
                                             item_value,
                                             key,
                                             css_class,