[Mpuls-commits] r1537 - wasko/branches/2.0/mpulsweb/lib

[scm-commit@wald.intevation.org]

Author: torsten
Date: 2010-02-12 15:34:07 +0100 (Fri, 12 Feb 2010)
New Revision: 1537

Modified:
   wasko/branches/2.0/mpulsweb/lib/renderer.py
Log:
* mpulsweb/lib/renderer.py (ViewRenderer._renderText)
(ViewRenderer._renderDate),
(ViewRenderer._renderInt),
(ViewRenderer._renderTextArea): escape values
before inserting the in the form. 



Modified: wasko/branches/2.0/mpulsweb/lib/renderer.py
===================================================================
--- wasko/branches/2.0/mpulsweb/lib/renderer.py	2010-02-12 14:03:34 UTC (rev 1536)
+++ wasko/branches/2.0/mpulsweb/lib/renderer.py	2010-02-12 14:34:07 UTC (rev 1537)
@@ -373,7 +373,7 @@
         meta = self._getMeta(node) 
         out  = []
         id   = node.getIdentifier()
-        data = node.getValue() or ""
+        data = escape(node.getValue() or "")
         size = meta.getSize()
         disabled = self.ro_mode and "disabled" or ""
         maxlength = meta.getMaxLength()
@@ -405,7 +405,7 @@
         meta = self._getMeta(node) 
         out  = []
         id   = node.getIdentifier()
-        data = node.getValue() or ""
+        data = escape(node.getValue() or "")
         disabled = self.ro_mode and "disabled" or ""
         out.append(self._renderLabel(node))
         out.append(self._renderAttributes(node))
@@ -419,7 +419,7 @@
         meta  = self._getMeta(node) 
         out   = []
         id    = node.getIdentifier()
-        value = node.getValue() or ""
+        value = escape(node.getValue() or "")
         cols  = meta.getCols() or "0"
         rows  = meta.getRows() or "0"
         out.append(self._renderLabel(node, not self.ro_mode))