Mercurial > p > roundup > code
diff CHANGES.txt @ 5004:494d255043c9
Display errors containing HTML with RejectRaw (issue2550847)
In general outputting un-escaped HTML in a message to the user is an
unsafe operation, which is why error message are escaped by default. In
some cases though it is desirable for a detector to include HTML within
an error message. For these cases where HTML is required the RejectRaw
exception can be used within the detector.
| author | John Kristensen <john@jerrykan.com> |
|---|---|
| date | Sat, 10 Oct 2015 23:35:51 +1100 |
| parents | ae12b4b3ea9e |
| children | bb97f61e1b73 |
line wrap: on
line diff
--- a/CHANGES.txt Sat Oct 10 23:07:17 2015 +1100 +++ b/CHANGES.txt Sat Oct 10 23:35:51 2015 +1100 @@ -57,6 +57,9 @@ (similar to RFC 2822), e.g. +0200 for CEST or -0500 for EST. This also works in the XMLRPC interface. For examples see roundup.date.Date. (Ralf Schlatterbeck) +- Add RejectRaw exception to allow unescaped HTML error messages to be + displayed to the user (thanks Ezio Melotti for the initial patch) + (John Kristensen) Fixed: