Skip to content

D
django-rest-framework
Commit b5c98f68 by Tom Christie
Options

Properly escape URLs when replacing query parameter

parent 65a0d083
Showing with 1 additions and 1 deletions
rest_framework/templatetags/rest_framework.py
...@@ -22,7 +22,7 @@ def replace_query_param(url, key, val): ...@@ -22,7 +22,7 @@ def replace_query_param(url, key, val):
query_dict = QueryDict(query).copy() query_dict = QueryDict(query).copy()
query_dict[key] = val query_dict[key] = val
query = query_dict.urlencode() query = query_dict.urlencode()
return urlparse.urlunsplit((scheme, netloc, path, query, fragment)) return escape(urlparse.urlunsplit((scheme, netloc, path, query, fragment)))
# Regex for adding classes to html snippets # Regex for adding classes to html snippets
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment