Apostrophes in attributes are escaped (prevents developer from using url tag)

[bcoughlan]

action: "{% url 'django.contrib.auth.views.login' %}"

renders as:

`action='{% url "django.contrib.auth.views.login" %}'``

Which is obviously problematic. Had a poke around the code but I'm not familiar enough with it yet to track down the problem.

Is there a need to escape apostrpohes at all. Given that it's a developers language I don't see any security risk posed by it.

[andreif]

I think this issue is related to #38 and #39. Using logic as a string with Django template tags is probably not the best idea. I believe we can add some original haml logic:

%form{action: url('django.contrib.auth.views.login')}

converted to:

<form action="{% url 'django.contrib.auth.views.login' %}">

[andreif]

You may be also interested in albsen#4 (comment)