p15693087
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

The "first" filter can return an unsafe string for safe input ( {{"<"|first}} ), so change is_safe to False. Refs #5567. 

git-svn-id: http://code.djangoproject.com/svn/django/trunk@6997 bcc190cf-cafb-0310-a4f2-bffc1f526a37
This commit is contained in:
Malcolm Tredinnick 2008-01-06 03:53:04 +00:00
parent 3d52ce730f
commit 1f6bc7ffa7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
django/template/defaultfilters.py
View File

@ -433,7 +433,7 @@ def first(value):
return value[0] return value[0]
except IndexError: except IndexError:
return u'' return u''
first.is_safe = True first.is_safe = False
def join(value, arg): def join(value, arg):
"""Joins a list with a string, like Python's ``str.join(list)``.""" """Joins a list with a string, like Python's ``str.join(list)``."""