Permalink
Browse files

Escape quotes in HTML attributes.

  • Loading branch information...
geekman committed Jan 5, 2014
1 parent bb9186a commit c9b2c70bf5467669aaf5b43cc826ba44fe75cc7e
Showing with 1 addition and 1 deletion.
  1. +1 −1 acrylamid/lib/html.py
View
@@ -43,7 +43,7 @@ def format(attrs):
if value is None:
res.append(key)
else:
- res.append('%s="%s"' % (key, escape(value)))
+ res.append('%s="%s"' % (key, escape(value, quote=True)))
return ' '.join(res)

0 comments on commit c9b2c70

Please sign in to comment.