html_error_template() should escape the exception name and message #142
Description
Migrated issue, originally created by Anonymous
from mako.template import Template
from mako.exceptions import html_error_template
x = Template("""
X:
<% raise Exception('<span style="color:red">Foobar</span>') %>
""")
try:
x.render()
except:
# <h3>Exception: <span style="color:red">Foobar</span></h3>
print html_error_template().render(full=False, css=False)
Attachments: 142.patch