diff options
author | Senthil Kumaran <orsenthil@gmail.com> | 2009-04-02 03:02:03 (GMT) |
---|---|---|
committer | Senthil Kumaran <orsenthil@gmail.com> | 2009-04-02 03:02:03 (GMT) |
commit | 3e2ea79bdaa6be1337b34f8da03f8c42dfe43d2f (patch) | |
tree | c8dfbdea3199a296fd204945c1255c4c83d7eaec /Lib/http | |
parent | b868a66ccb9cde89d934a896fe3c5629ed007d42 (diff) | |
download | cpython-3e2ea79bdaa6be1337b34f8da03f8c42dfe43d2f.zip cpython-3e2ea79bdaa6be1337b34f8da03f8c42dfe43d2f.tar.gz cpython-3e2ea79bdaa6be1337b34f8da03f8c42dfe43d2f.tar.bz2 |
Fixing the issue4860. Escaping the embedded '"' in the js_output method of Morsel class.
Diffstat (limited to 'Lib/http')
-rw-r--r-- | Lib/http/cookies.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Lib/http/cookies.py b/Lib/http/cookies.py index 03d1627..695161a 100644 --- a/Lib/http/cookies.py +++ b/Lib/http/cookies.py @@ -392,7 +392,7 @@ class Morsel(dict): document.cookie = \"%s\"; // end hiding --> </script> - """ % ( self.OutputString(attrs), ) + """ % ( self.OutputString(attrs).replace('"',r'\"')) # end js_output() def OutputString(self, attrs=None): |