Skip to content

0.1.14

Latest

Choose a tag to compare

@mpasternak mpasternak released this 31 May 21:06
· 7 commits to master since this release

Bugfix release.

  • Render query templates with autoescaping disabled, so parameter values are substituted verbatim. HTML-escaping previously corrupted query-significant characters such as <, & and " (e.g. a value A & B became A &amp; B).

Query values still compile to Django Q objects → parameterized SQL, so this does not affect SQL-injection safety.

PyPI: https://pypi.org/project/django-dsl/0.1.14/