diff options
| author | Mike Bayer <mike_mp@zzzcomputing.com> | 2010-06-22 17:35:14 -0400 |
|---|---|---|
| committer | Mike Bayer <mike_mp@zzzcomputing.com> | 2010-06-22 17:35:14 -0400 |
| commit | a0354c3ef082ab4559064529678b027ead78b031 (patch) | |
| tree | 5f47a56b2952a2b7334ce685ac71c7171f15330c /CHANGES | |
| parent | c3874653cbdf58f5aaa39ef51ee4433af4d42fb8 (diff) | |
| download | external_python_mako-a0354c3ef082ab4559064529678b027ead78b031.tar.gz external_python_mako-a0354c3ef082ab4559064529678b027ead78b031.tar.bz2 external_python_mako-a0354c3ef082ab4559064529678b027ead78b031.zip | |
- Now using MarkupSafe for HTML escaping,
i.e. in place of cgi.escape(). Faster
C-based implementation and also escapes
single quotes for additional security.
Supports the __html__ attribute for
the given expression as well.
When using "disable_unicode" mode,
a pure Python HTML escaper function
is used which also quotes single quotes.
Note that Pylons by default doesn't
use Mako's filter - check your
environment.py file.
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -1,4 +1,19 @@ 0.3.4 +- Now using MarkupSafe for HTML escaping, + i.e. in place of cgi.escape(). Faster + C-based implementation and also escapes + single quotes for additional security. + Supports the __html__ attribute for + the given expression as well. + + When using "disable_unicode" mode, + a pure Python HTML escaper function + is used which also quotes single quotes. + + Note that Pylons by default doesn't + use Mako's filter - check your + environment.py file. + - Fixed call to "unicode.strip" in exceptions.text_error_template which is not Py3k compatible. [ticket:137] |