[Erp5-report] r20946 - /erp5/trunk/products/ERP5Form/FormulatorPatch.py

[nobody at svn.erp5.org]

Author: vincent
Date: Wed May 14 07:44:21 2008
New Revision: 20946

URL: http://svn.erp5.org?rev=20946&view=rev
Log:
Provided values are not always strings (int, Messages, ...) but they will anyway get cast into strings in Formulator's render_element. So always cast before escaping.

Modified:
    erp5/trunk/products/ERP5Form/FormulatorPatch.py

Modified: erp5/trunk/products/ERP5Form/FormulatorPatch.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Form/FormulatorPatch.py?rev=20946&r1=20945&r2=20946&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Form/FormulatorPatch.py (original)
+++ erp5/trunk/products/ERP5Form/FormulatorPatch.py Wed May 14 07:44:21 2008
@@ -611,14 +611,14 @@
 
 
       if item_value == value and not selected_found:
-          rendered_item = self.render_selected_item(escape(item_text),
+          rendered_item = self.render_selected_item(escape(str(item_text)),
                                                     item_value,
                                                     key,
                                                     css_class,
                                                     extra_item)
           selected_found = 1
       else:
-          rendered_item = self.render_item(escape(item_text),
+          rendered_item = self.render_item(escape(str(item_text)),
                                             item_value,
                                             key,
                                             css_class,