languages/cpython
languages/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython synced 2024-09-16 01:31:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

#9061: warn that single quotes are never escaped.

Browse source
This commit is contained in:
Georg Brandl 2010-08-02 21:51:18 +00:00
parent 75f2f8206c
commit 1800934285
1 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
Doc/library/cgi.rst
View file

@ -324,10 +324,13 @@ algorithms implemented in this module in other circumstances.
Convert the characters ``'&'``, ``'<'`` and ``'>'`` in string *s* to HTML-safe
sequences. Use this if you need to display text that might contain such
characters in HTML. If the optional flag *quote* is true, the quotation mark
character (``'"'``) is also translated; this helps for inclusion in an HTML
attribute value, as in ``<A HREF="...">``. If the value to be quoted might
include single- or double-quote characters, or both, consider using the
:func:`quoteattr` function in the :mod:`xml.sax.saxutils` module instead.
character (``"``) is also translated; this helps for inclusion in an HTML
attribute value delimited by double quotes, as in ``<a href="...">``. Note
that single quotes are never translated.
If the value to be quoted might include single- or double-quote characters,
or both, consider using the :func:`quoteattr` function in the
:mod:`xml.sax.saxutils` module instead.
.. _cgi-security: