[kupfer] browser: Escape source name properly



commit bc0fefbad16c1383a8f7c0dae804a43dbbca7899
Author: Ulrik Sverdrup <ulrik sverdrup gmail com>
Date:   Sat Oct 24 17:08:23 2009 +0200

    browser: Escape source name properly
    
    Make sure we pass all unknown parameters through markup escape
    everywhere, this includes "%s is empty" where %s is a source name,
    that might include markup characters (the XML &<>).

 kupfer/browser.py |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)
---
diff --git a/kupfer/browser.py b/kupfer/browser.py
index 95835fb..18856aa 100644
--- a/kupfer/browser.py
+++ b/kupfer/browser.py
@@ -636,7 +636,9 @@ class LeafSearch (Search):
 			lambda m: (m.get_thumbnail(self.icon_size*4/3, self.icon_size) or \
 					m.get_pixbuf(self.icon_size))
 		if empty and self.source:
-			return _("%s is empty") % self.source, get_pbuf(self.source)
+			return (_("%s is empty") %
+					escape_markup_str(unicode(self.source)),
+					get_pbuf(self.source))
 		elif self.source:
 			return (_('No matches in %(src)s for "%(query)s"') % {
 				"src": u"<i>%s</i>" % escape_markup_str(unicode(self.source)),



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]