aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authortkikuchi <>2005-03-10 23:59:18 +0000
committertkikuchi <>2005-03-10 23:59:18 +0000
commit40358ce7a0cae9fc207291afbad9ef0d9b37ca04 (patch)
tree255598c29cb45a545d4abe6155a4745d3a43404f
parentdfaa226a8ea36647ad9007f3d1d9a442f7d59953 (diff)
downloadmailman2-40358ce7a0cae9fc207291afbad9ef0d9b37ca04.tar.gz
mailman2-40358ce7a0cae9fc207291afbad9ef0d9b37ca04.tar.xz
mailman2-40358ce7a0cae9fc207291afbad9ef0d9b37ca04.zip
Use of websafe() here is too severe. Only '<' is escaped.
-rw-r--r--Mailman/Gui/GUIBase.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/Mailman/Gui/GUIBase.py b/Mailman/Gui/GUIBase.py
index 88288afa..3107576b 100644
--- a/Mailman/Gui/GUIBase.py
+++ b/Mailman/Gui/GUIBase.py
@@ -123,7 +123,8 @@ class GUIBase:
pass
def _escape(self, property, value):
- return Utils.websafe(value)
+ value = value.replace('<', '&lt;')
+ return value
def handleForm(self, mlist, category, subcat, cgidata, doc):
for item in self.GetConfigInfo(mlist, category, subcat):