Merge f4644cf into d175399

divio · Apr 25, 2016 · 8937185 · 8937185
2 parents d175399 + f4644cf
commit 8937185
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/aldryn_apphooks_config/models.py b/aldryn_apphooks_config/models.py
@@ -4,6 +4,7 @@
 from app_data import AppDataField
 from django.db import models
 from django.utils.encoding import python_2_unicode_compatible
+from django.utils.html import escape
 from django.utils.translation import ugettext_lazy as _
 
 
@@ -33,9 +34,9 @@ def save(self, *args, **kwargs):
 
     def __str__(self):
         if self.cmsapp:
-            return _('%s / %s') % (self.cmsapp.name, self.namespace)
+            return _('%s / %s') % (escape(self.cmsapp.name), escape(self.namespace))
         else:
-            return _('%s / %s') % (self.type, self.namespace)
+            return _('%s / %s') % (escape(self.type), escape(self.namespace))
 
     def __getattr__(self, item):
         """