Escape settings json using escapejs.

incuna · Sep 30, 2013 · 9474d9a · 9474d9a
1 parent 8d814cb
commit 9474d9a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # django-settingsjs changelog.
 
+## v0.1.4
+
+Use `escapejs` to escape JSON rather than assuming it is `safe`. 
 
 ## v0.1.3
 

diff --git a/settingsjs/__init__.py b/settingsjs/__init__.py
@@ -1,4 +1,4 @@
-__version__ = (0, 1, 3)
+__version__ = (0, 1, 4)
 
 
 def get_version():

diff --git a/settingsjs/templates/settingsjs/settings.js b/settingsjs/templates/settingsjs/settings.js
@@ -1,5 +1,5 @@
 (function (window) {
-    var settings = {{ jssettings|safe }}; 
+    var settings = JSON.parse('{{ jssettings|escapejs }}'); 
     S = function () { }
     S.get = function (key) { return settings[key]; }
     S.set = function (key, val) { return settings[key] = val; }