Permalink
Browse files

Merge pull request #197 from geekman/master

Escape quotes in HTML attributes
  • Loading branch information...
2 parents bb9186a + c9b2c70 commit 9e05d4fc610de9c17ff112b3ad2cfbab0fdd5b27 @posativ committed Jan 5, 2014
Showing with 1 addition and 1 deletion.
  1. +1 −1 acrylamid/lib/html.py
View
@@ -43,7 +43,7 @@ def format(attrs):
if value is None:
res.append(key)
else:
- res.append('%s="%s"' % (key, escape(value)))
+ res.append('%s="%s"' % (key, escape(value, quote=True)))
return ' '.join(res)

0 comments on commit 9e05d4f

Please sign in to comment.