mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 01:25:32 +00:00
Code Issues 32 Releases Wiki Activity

The "first" filter can return an unsafe string for safe input ( {{"<"|first}} ), so change is_safe to False. Refs #5567.

Browse Source 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@6997 bcc190cf-cafb-0310-a4f2-bffc1f526a37
This commit is contained in:
Malcolm Tredinnick
2008-01-06 03:53:04 +00:00
parent 3d52ce730f
commit 1f6bc7ffa7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
django/template/defaultfilters.py
View File

@@ -433,7 +433,7 @@ def first(value):
return value[0] return value[0]
except IndexError: except IndexError:
return u'' return u''
first.is_safe = True first.is_safe = False
def join(value, arg): def join(value, arg):
"""Joins a list with a string, like Python's ``str.join(list)``.""" """Joins a list with a string, like Python's ``str.join(list)``."""