Changeset 2401

Timestamp:

Aug 9, 2009, 6:45:29 PM (15 years ago)

Author:

quentin

Message:

Properly HTML-escape functions

File:

• package_branches/invirt-web/cherrypy/code/templates/functions.mako (modified) (2 diffs)

package_branches/invirt-web/cherrypy/code/templates/functions.mako

@@ +1 @@
+<%page expression_filter="h"/>
 <%def name="databaseList(lst, default, onchange, name, id, valueattr, descattr)">
 <select name="${name}" id="${id}"\
@@ -16 +17 @@
 <%def name="cdromList(default='', onchange=None)">
 ${databaseList(sorted(database.CDROM.query(), key=lambda x: x.description),
-               default, onchange, 'cdrom', 'cdromlist', 'cdrom_id', 'description')}
+               default, onchange, 'cdrom', 'cdromlist', 'cdrom_id', 'description')|n}
 </%def>
 
 <%def name="autoList(default='', onchange=None)">
 ${databaseList(sorted(database.Autoinstall.query(), key=lambda x: x.description),
-               default, onchange, 'autoinstall', 'autoinstalllist', 'autoinstall_id', 'description')}
+               default, onchange, 'autoinstall', 'autoinstalllist', 'autoinstall_id', 'description')|n}
 </%def>