encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2024-11-23 01:57:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

Properly escape URLs when replacing query parameter

Browse Source
This commit is contained in:
Tom Christie 2014-11-03 11:10:24 +00:00
parent 65a0d083d6
commit b5c98f686d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rest_framework/templatetags/rest_framework.py
View File

@ -22,7 +22,7 @@ def replace_query_param(url, key, val):
query_dict = QueryDict(query).copy() query_dict = QueryDict(query).copy()
query_dict[key] = val query_dict[key] = val
query = query_dict.urlencode() query = query_dict.urlencode()
return urlparse.urlunsplit((scheme, netloc, path, query, fragment)) return escape(urlparse.urlunsplit((scheme, netloc, path, query, fragment)))
# Regex for adding classes to html snippets # Regex for adding classes to html snippets