Commit Graph

10 Commits

Author SHA1 Message Date
Malcolm Tredinnick 356662cf74 Implemented auto-escaping of variable output in templates. Fully controllable by template authors and it's possible to write filters and templates that simulataneously work in both auto-escaped and non-auto-escaped environments if you need to. Fixed #2359
See documentation in templates.txt and templates_python.txt for how everything
works.

Backwards incompatible if you're inserting raw HTML output via template variables.

Based on an original design from Simon Willison and with debugging help from Michael Radziej.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@6671 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2007-11-14 12:58:53 +00:00
Malcolm Tredinnick 6d104115d1 More pre-emptive escaping of strings that should not be interpreted as HTML.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@3352 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-07-15 01:07:13 +00:00
Adrian Holovaty f69cf70ed8 MERGED MAGIC-REMOVAL BRANCH TO TRUNK. This change is highly backwards-incompatible. Please read http://code.djangoproject.com/wiki/RemovingTheMagic for upgrade instructions.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@2809 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-05-02 01:31:56 +00:00
Jacob Kaplan-Moss 0df9fb8f9a Fixed #620 -- raw_id_admin and limit_choices_to now play well together (thanks to David Schein)
git-svn-id: http://code.djangoproject.com/svn/django/trunk@2414 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-02-27 18:52:54 +00:00
Adrian Holovaty a5005c29be Fixed #1100 -- Admin RelatedObjectLookup JavaScript now works with OneToOneField. Thanks, Joseph Kocherhans
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1881 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-01-09 02:06:00 +00:00
Georg Bauer 787dea30c1 added missing translations to the file widget
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1719 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-12-17 21:27:54 +00:00
Georg Bauer a841530a13 first take at admin JavaScript translation - translation hooks for the calendar and time picker are added and the german translation is updated
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1530 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-12-04 12:30:14 +00:00
Adrian Holovaty 5a54455ac8 Negligible spacing fix to admin/templates/widget/foreign.html
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1487 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-11-29 05:50:31 +00:00
Adrian Holovaty 3ede006fc9 Fixed #911 -- Made template system scoped to the parser instead of the template module. Also changed the way tags/filters are registered and added support for multiple arguments to {% load %} tag. Thanks, rjwittams. This is a backwards-incompatible change for people who've created custom template tags or filters. See http://code.djangoproject.com/wiki/BackwardsIncompatibleChanges for upgrade instructions.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1443 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-11-26 22:46:31 +00:00
Adrian Holovaty 9dda4abee1 MERGED NEW-ADMIN BRANCH (except for po/mo files, which will come in a separate commit)
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1434 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-11-25 21:20:09 +00:00