Projet

Général

Profil

0001-misc-mark-form-digest-as-safe-as-it-s-considered-as-.patch

Frédéric Péters, 23 juillet 2018 15:22

Télécharger (1,86 ko)

Voir les différences:

Subject: [PATCH] misc: mark form digest as safe as it's considered as text
 (#25428)

 tests/test_backoffice_pages.py | 4 ++--
 wcs/formdata.py                | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
tests/test_backoffice_pages.py
2564 2564

  
2565 2565
    # check digest is included
2566 2566
    formdata = formdef.data_class().select(lambda x: not x.is_draft())[0]
2567
    formdata.formdef.digest_template = 'digest of number {{form_number}}'
2567
    formdata.formdef.digest_template = 'digest of number <{{form_number}}>'
2568 2568
    formdata.store()
2569 2569
    assert formdata.get(formdata.id).digest
2570 2570
    resp = app.get('/backoffice/management/listing')
2571 2571
    assert formdata.get_url(backoffice=True) in resp.body
2572
    assert formdata.digest in resp.body
2572
    assert 'digest of number &lt;%s&gt;' % formdata.id_display in resp.body
2573 2573

  
2574 2574
    # check a Channel column is added when welco is available
2575 2575
    assert not 'Channel' in resp.body
wcs/formdata.py
394 394
                if template is None:
395 395
                    new_value = None
396 396
                else:
397
                    new_value = Template(template).render(context)
397
                    new_value = Template(template, autoescape=False).render(context)
398 398
                if new_value != getattr(self, attribute, None):
399 399
                    setattr(self, attribute, new_value)
400 400
                    changed = True
401
-