# HG changeset patch
# User Marcin Kuzminski <marcin@python-works.com>
# Date 1276030944 -7200
# Node ID a83e86e3f580ad5ae82f7925210b5c5c7ff896a4
# Parent  0d809e72b357641bfa3355bba0ae32b8718b372c
fixed bug when displaying html not escaped data as raw diff.

diff -r 0d809e72b357 -r a83e86e3f580 pylons_app/controllers/files.py
--- a/pylons_app/controllers/files.py	Tue Jun 08 19:32:39 2010 +0200
+++ b/pylons_app/controllers/files.py	Tue Jun 08 23:02:24 2010 +0200
@@ -26,6 +26,7 @@
 from pylons import request, response, session, tmpl_context as c, url
 from pylons_app.lib.auth import LoginRequired
 from pylons_app.lib.base import BaseController, render
+import pylons_app.lib.helpers as h 
 from pylons_app.model.hg_model import HgModel
 from vcs.exceptions import RepositoryError, ChangesetError
 from vcs.utils import diffs as differ
@@ -157,7 +158,7 @@
             return diff.raw_diff()
         
         elif action == 'raw':
-            c.cur_diff = '<pre class="raw">%s</pre>' % diff.raw_diff()
+            c.cur_diff = '<pre class="raw">%s</pre>' % h.escape(diff.raw_diff())
         elif action == 'diff':
             c.cur_diff = diff.as_html()