diff options
| author | Fabien Meghazi <fme@openerp.com> | 2013-02-13 11:42:29 +0100 |
|---|---|---|
| committer | Fabien Meghazi <fme@openerp.com> | 2013-02-13 11:42:29 +0100 |
| commit | 3cd5a856be7a20cbcee884f10903a6c0e6ad6e41 (patch) | |
| tree | 5ebad6e2a5415755ddcd6f94c7246b9d6b7a74b0 /addons/web/controllers | |
| parent | ba591e26327e26363a725044acdc1f876596c83a (diff) | |
[FIX] Properly escape values in templates
bzr revid: fme@openerp.com-20130213104229-jjlhilp355lpi22p
Diffstat (limited to 'addons/web/controllers')
| -rw-r--r-- | addons/web/controllers/testing.py | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/addons/web/controllers/testing.py b/addons/web/controllers/testing.py index 5692139f002..b6327bf4622 100644 --- a/addons/web/controllers/testing.py +++ b/addons/web/controllers/testing.py @@ -32,12 +32,12 @@ NOMODULE_TEMPLATE = Template(u"""<!DOCTYPE html> </form> </body> </html> -""") +""", default_filters=['h']) NOTFOUND = Template(u""" <p>Unable to find the module [${module}], please check that the module name is correct and the module is on OpenERP's path.</p> <a href="/web/tests"><< Back to tests</a> -""") +""", default_filters=['h']) TESTING = Template(u"""<!DOCTYPE html> <html style="height: 100%"> <%def name="to_path(module, p)">/${module}/${p}</%def> @@ -51,9 +51,9 @@ TESTING = Template(u"""<!DOCTYPE html> <script src="/web/static/lib/qunit/qunit.js"></script> <script type="text/javascript"> - var oe_db_info = ${db_info}; + var oe_db_info = ${db_info | n}; // List of modules, each module is preceded by its dependencies - var oe_all_dependencies = ${dependencies}; + var oe_all_dependencies = ${dependencies | n}; QUnit.config.testTimeout = 5 * 60 * 1000; </script> </head> @@ -83,7 +83,7 @@ TESTING = Template(u"""<!DOCTYPE html> % endif % endfor </html> -""") +""", default_filters=['h']) class TestRunnerController(http.Controller): _cp_path = '/web/tests' |