mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-11-18 11:00:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Refs #24469 -- Fixed escaping of forms, fields, and media in non-Django templates.

Browse source
This commit is contained in:
Moritz Sichert 2015-03-10 21:21:28 +01:00 • committed by Tim Graham
parent 465edf2bb2
commit 6bff343989
5 changed files with 37 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
django/forms/forms.py
View file

@ -122,6 +122,9 @@ class BaseForm(object):
fields.update(self.fields) # add remaining fields in original order
self.fields = fields
def __html__(self):
return force_text(self)
def __str__(self):
return self.as_table()
@ -518,6 +521,9 @@ class BoundField(object):
self.help_text = field.help_text or ''
self._initial_value = UNSET
def __html__(self):
return force_text(self)
def __str__(self):
"""Renders this field as an HTML widget."""
if self.field.show_hidden_initial:

3
django/forms/widgets.py
View file

@ -51,6 +51,9 @@ class Media(object):
for name in MEDIA_TYPES:
getattr(self, 'add_' + name)(media_attrs.get(name, None))
def __html__(self):
return force_text(self)
def __str__(self):
return self.render()