#16684: BaseForm needs to escape the 'class' attribute value
---------------------------+------------------------------------
     Reporter:  dtrebbien  |                    Owner:  nobody
         Type:  Bug        |                   Status:  closed
    Component:  Forms      |                  Version:  1.3
     Severity:  Normal     |               Resolution:  wontfix
     Keywords:             |             Triage Stage:  Accepted
    Has patch:  1          |      Needs documentation:  0
  Needs tests:  1          |  Patch needs improvement:  0
Easy pickings:  0          |                    UI/UX:  0
---------------------------+------------------------------------
Changes (by kmtracey):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 Given the different rules for escaping css classes than regular html
 escaping, and the fact that css class names are generally going to be
 under the control of developers and not pulled from user-supplied input, I
 don't see that escaping css class names is something Django should be
 doing.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/16684#comment:3>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to