diff options
| author | Tom Christie | 2014-11-03 11:29:48 +0000 | 
|---|---|---|
| committer | Tom Christie | 2014-11-03 11:29:48 +0000 | 
| commit | 650a91ac24cbd3e5b4ad5d7d7c6706fdf6160a78 (patch) | |
| tree | 0e53b99e71523289099b79ef1b19a5d70ef3cb1b | |
| parent | 96bb77dc35a75df0fd9ad2fabb0f4661b2485600 (diff) | |
| download | django-rest-framework-2.4.4.tar.bz2 | |
Fix URL escaping2.4.4
| -rw-r--r-- | rest_framework/templatetags/rest_framework.py | 4 | 
1 files changed, 2 insertions, 2 deletions
| diff --git a/rest_framework/templatetags/rest_framework.py b/rest_framework/templatetags/rest_framework.py index 7c914ed6..84ba1b0a 100644 --- a/rest_framework/templatetags/rest_framework.py +++ b/rest_framework/templatetags/rest_framework.py @@ -22,7 +22,7 @@ def replace_query_param(url, key, val):      query_dict = QueryDict(query).copy()      query_dict[key] = val      query = query_dict.urlencode() -    return escape(urlparse.urlunsplit((scheme, netloc, path, query, fragment))) +    return urlparse.urlunsplit((scheme, netloc, path, query, fragment))  # Regex for adding classes to html snippets @@ -75,7 +75,7 @@ def add_query_param(request, key, val):      """      iri = request.get_full_path()      uri = iri_to_uri(iri) -    return replace_query_param(uri, key, val) +    return escape(replace_query_param(uri, key, val))  @register.filter | 
