Ticket #1854: escaping_html.patch

File escaping_html.patch, 823 bytes (added by timClicks, 14 years ago)

  • taexporthtml.py 

    diff --git a/taexporthtml.py b/taexporthtml.py
index 5a0d163..47577f0 100644
    a b import gtk 
    2424import os.path
    2525from tautils import data_to_string, save_picture, image_to_base64
    2626from gettext import gettext as _
     27from cgi import escape
    2728
    2829def save_html(self, tw, embed_flag=True):
    2930    """ Either: Save canvas and code or pictures to HTML """
    … … def save_html(self, tw, embed_flag=True): 
    114115        code += (self.html_glue['img'][0] + imgdata + \
    115116                 self.html_glue['img'][1])
    116117        code += self.html_glue['div'][0]
    117         code += data_to_string(tw.assemble_data_to_save(False, True))
     118        code += escape(data_to_string(tw.assemble_data_to_save(False, True)))
    118119        code += self.html_glue['div'][1]
    119120
    120121    if tw.running_sugar: