Author: jacob Date: 2010-03-01 17:26:44 -0600 (Mon, 01 Mar 2010) New Revision: 12645
Modified: django/branches/releases/1.1.X/django/contrib/formtools/wizard.py Log: [1.1.X] Fixed #1104: set `FormWizard.extra_context` in `__init__` to avoid context leakage. Backport of [12644] from trunk. Modified: django/branches/releases/1.1.X/django/contrib/formtools/wizard.py =================================================================== --- django/branches/releases/1.1.X/django/contrib/formtools/wizard.py 2010-03-01 23:26:08 UTC (rev 12644) +++ django/branches/releases/1.1.X/django/contrib/formtools/wizard.py 2010-03-01 23:26:44 UTC (rev 12645) @@ -16,20 +16,26 @@ from django.contrib.formtools.utils import security_hash class FormWizard(object): - # Dictionary of extra template context variables. - extra_context = {} - # The HTML (and POST data) field name for the "step" variable. step_field_name="wizard_step" # METHODS SUBCLASSES SHOULDN'T OVERRIDE ################################### def __init__(self, form_list, initial=None): - "form_list should be a list of Form classes (not instances)." + """ + Start a new wizard with a list of forms. + + form_list should be a list of Form classes (not instances). + """ self.form_list = form_list[:] self.initial = initial or {} - self.step = 0 # A zero-based counter keeping track of which step we're in. + # Dictionary of extra template context variables. + extra_context = {} + + # A zero-based counter keeping track of which step we're in. + self.step = 0 + def __repr__(self): return "step: %d\nform_list: %s\ninitial_data: %s" % (self.step, self.form_list, self.initial) -- You received this message because you are subscribed to the Google Groups "Django updates" group. To post to this group, send email to django-upda...@googlegroups.com. To unsubscribe from this group, send email to django-updates+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-updates?hl=en.