diff options
| author | W. Trevor King <wking@drexel.edu> | 2009-06-22 10:39:05 -0400 |
|---|---|---|
| committer | W. Trevor King <wking@drexel.edu> | 2009-06-22 10:39:05 -0400 |
| commit | cabb531e2300c5643447ccd1ffd311ee5690773a (patch) | |
| tree | 37c0a4144c302bba0a885820388db7ef1f96036c /libbe/comment.py | |
| parent | fb342df1b66897ab17377d6e923049e292149683 (diff) | |
| download | bugseverywhere-cabb531e2300c5643447ccd1ffd311ee5690773a.tar.gz | |
Escape XML strings.
Since
<creator>John Doe <jdoe@example.com></creator>
is not valid XML.
Diffstat (limited to 'libbe/comment.py')
| -rw-r--r-- | libbe/comment.py | 22 |
1 files changed, 12 insertions, 10 deletions
diff --git a/libbe/comment.py b/libbe/comment.py index 8d03a7b..d0fa5ee 100644 --- a/libbe/comment.py +++ b/libbe/comment.py @@ -19,6 +19,7 @@ import os import os.path import time +import xml.sax.saxutils import textwrap import doctest @@ -234,16 +235,17 @@ class Comment(Tree, settings_object.SavedSettingsObject): """ if shortname == None: shortname = self.uuid - lines = ["<comment>", - " <uuid>%s</uuid>" % self.uuid, - " <short-name>%s</short-name>" % (shortname,),] - if self.in_reply_to != settings_object.EMPTY: - lines.append(" <in-reply-to>%s</in-reply-to>" % self.in_reply_to) - lines.extend([ - " <from>%s</from>" % self._setting_attr_string("From"), - " <date>%s</date>" % self.time_string, - " <body>%s</body>" % (self.body or "").rstrip('\n'), - "</comment>\n"]) + info = [("uuid", self.uuid), + ("short-name", shortname), + ("in-reply-to", self.in_reply_to), + ("from", self._setting_attr_string("From")), + ("date", self.time_string), + ("body", (self.body or "").rstrip('\n'))] + lines = ["<comment>"] + for (k,v) in info: + if v not in [settings_object.EMPTY, None]: + lines.append(' <%s>%s</%s>' % (k,xml.sax.saxutils.escape(v),k)) + lines.append("</comment>") istring = ' '*indent sep = '\n' + istring return istring + sep.join(lines).rstrip('\n') |