chiark / gitweb /
~ianmdlvl / fdroidserver.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ee57285) | patch
metadata: switch from deprecated cgi.escape to html.escape
authorHans-Christoph Steiner <hans@eds.org>
Mon, 15 May 2017 15:27:48 +0000 (17:27 +0200)
committerHans-Christoph Steiner <hans@eds.org>
Thu, 18 May 2017 14:13:17 +0000 (16:13 +0200)
commit84bb41a91f71ef6d3e2acfb09232f4e26c7c4421
tree77d91d590ae8d5f438b4ca26428a8df9cf4f31betree | snapshot
parentee57285817ae3072fb4d708126de041ac328806ecommit | diff
metadata: switch from deprecated cgi.escape to html.escape

cgi.escape is deprecated in Python 3.x and has security issues:
https://bugs.python.org/issue26398

html.escape() differs from cgi.escape() by its defaults to quote=True:

 s = html.escape( """& < " ' >""" )   # s = '&amp; &lt; &quot; &#x27; &gt;'
fdroidserver/metadata.py diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.