changeset 5282:d04e36ef71a8

data_table: use simple 'escape' function instead of 'tooltip' function The values will end up being double escaped when h.escape is used in template expansion and turned into a string which then will be escaped in the template.
author Mads Kiilerich <madski@unity3d.com>
date Thu, 23 Jul 2015 00:52:29 +0200
parents 82faecc21324
children d23d70cce785
files kallithea/templates/data_table/_dt_elements.html
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/kallithea/templates/data_table/_dt_elements.html	Mon Jul 20 15:11:42 2015 +0200
+++ b/kallithea/templates/data_table/_dt_elements.html	Thu Jul 23 00:52:29 2015 +0200
@@ -93,7 +93,7 @@
 <%def name="revision(name,rev,tip,author,last_msg)">
   <div>
   %if rev >= 0:
-      <a title="${h.tooltip('%s:\n\n%s' % (author,last_msg))}" class="tooltip revision-link safe-html-title" href="${h.url('changeset_home',repo_name=name,revision=tip)}">${'r%s:%s' % (rev,h.short_id(tip))}</a>
+      <a title="${'%s:\n\n%s' % (h.escape(author), h.escape(last_msg))}" class="tooltip revision-link safe-html-title" href="${h.url('changeset_home',repo_name=name,revision=tip)}">${'r%s:%s' % (rev,h.short_id(tip))}</a>
   %else:
       ${_('No changesets yet')}
   %endif