Fixed #2148 -- Now escaping ForeignKey fields correctly in Django adm…

…in change-list pages. Thanks, rushman@mail.ru git-svn-id: http://code.djangoproject.com/svn/django/trunk@3124 bcc190cf-cafb-0310-a4f2-bffc1f526a37
django · Jun 13, 2006 · 93974e0 · 93974e0
1 parent efcb591
commit 93974e0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/django/contrib/admin/templatetags/admin_list.py b/django/contrib/admin/templatetags/admin_list.py
@@ -131,7 +131,7 @@ def items_for_result(cl, result):
 
             if isinstance(f.rel, models.ManyToOneRel):
                 if field_val is not None:
-                    result_repr = getattr(result, f.name)
+                    result_repr = escape(getattr(result, f.name))
                 else:
                     result_repr = EMPTY_CHANGELIST_VALUE
             # Dates and times are special: They're formatted in a certain way.