tojson no longer escapes script blocks in HTML5 parsers. Fixed #605
This commit is contained in:
parent
01ac057d36
commit
c4f2075f4c
3 changed files with 10 additions and 5 deletions
|
|
@ -97,6 +97,8 @@ class JSONTestCase(FlaskTestCase):
|
|||
self.assert_equal(rv, '"<\\/script>"')
|
||||
rv = render('{{ "<\0/script>"|tojson|safe }}')
|
||||
self.assert_equal(rv, '"<\\u0000\\/script>"')
|
||||
rv = render('{{ "<!--<script>"|tojson|safe }}')
|
||||
self.assert_equal(rv, '"<\\u0021--<script>"')
|
||||
|
||||
def test_modified_url_encoding(self):
|
||||
class ModifiedRequest(flask.Request):
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue