The "first" filter can return an unsafe string for safe input ( {{"<"|first}} ), so change is_safe to False. Refs #5567.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@6997 bcc190cf-cafb-0310-a4f2-bffc1f526a37
This commit is contained in:
Malcolm Tredinnick 2008-01-06 03:53:04 +00:00
parent 3d52ce730f
commit 1f6bc7ffa7
1 changed files with 1 additions and 1 deletions

View File

@ -433,7 +433,7 @@ def first(value):
return value[0]
except IndexError:
return u''
first.is_safe = True
first.is_safe = False
def join(value, arg):
"""Joins a list with a string, like Python's ``str.join(list)``."""