Fixed a security problem caused by changed simplejson semantics.

Notice: this was never in a release version of Flask.
2010-04-19 18:51:04 +02:00 · 2010-04-19 18:51:04 +02:00 · ade490514d
commit ade490514d
parent 07e515b071
4 changed files with 16 additions and 2 deletions
--- a/docs/api.rst
+++ b/docs/api.rst
@ -250,6 +250,8 @@ Returning JSON
            doSomethingWith({{ user.username|tojson|safe }});
        </script>

+    Note that the ``|tojson`` filter escapes forward slashes properly.
+
 Template Rendering
 ------------------