#35606: Admin changelist broken for model instances with __html__ method
------------------------------+-------------------------------------------
     Reporter:  Claude Paroz  |                     Type:  Bug
       Status:  new           |                Component:  contrib.admin
      Version:  5.0           |                 Severity:  Release blocker
     Keywords:                |             Triage Stage:  Unreviewed
    Has patch:  0             |      Needs documentation:  0
  Needs tests:  0             |  Patch needs improvement:  0
Easy pickings:  0             |                    UI/UX:  0
------------------------------+-------------------------------------------
 Since [85366fbca723c9b37d0ac9db1d44e3f1cb188db2] (#34045), any model
 instance implementing an `__html__` method producing HTML markup is
 breaking the admin, because of the aria-label property will contain
 unescaped quotes that will break the page HTML.

 Maybe the solution is forcing `str(obj)` in the `format_html` call.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/35606>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/01070190bae97969-94b4882a-8925-4f48-bf51-f956538d1e4c-000000%40eu-central-1.amazonses.com.

Reply via email to