mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-08-01 09:32:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixed #18634 -- Don't escape variables in the context for startproject/startapp.

Browse source 
The & symbols which can come up in the secret key were
being escaped to &.
This commit is contained in:
Marc Tamlyn 2012-07-16 23:26:31 +01:00 • committed by Florian Apolloner
parent 59d99772f0
commit a875f612e0
4 changed files with 31 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

18
tests/regressiontests/admin_scripts/tests.py
View file

@ -1541,6 +1541,24 @@ class StartProject(LiveServerTestCase, AdminScriptTestCase):
self.assertIn("project_name = 'another_project'", content)
self.assertIn("project_directory = '%s'" % testproject_dir, content)
def test_no_escaping_of_project_variables(self):
"Make sure template context variables are not html escaped"
# We're using a custom command so we need the alternate settings
self.write_settings('alternate_settings.py')
template_path = os.path.join(test_dir, 'admin_scripts', 'custom_templates', 'project_template')
args = ['custom_startproject', '--template', template_path, 'another_project', 'project_dir', '--extra', '<&>', '--settings=alternate_settings']
testproject_dir = os.path.join(test_dir, 'project_dir')
os.mkdir(testproject_dir)
out, err = self.run_manage(args)
self.addCleanup(shutil.rmtree, testproject_dir)
self.assertNoOutput(err)
test_manage_py = os.path.join(testproject_dir, 'additional_dir', 'extra.py')
with open(test_manage_py, 'r') as fp:
content = fp.read()
self.assertIn("<&>", content)
# tidy up alternate settings
self.remove_settings('alternate_settings.py')
def test_custom_project_destination_missing(self):
"""
Make sure an exception is raised when the provided