web/views/baseviews.py
branchtls-sprint
changeset 1680 39860636e184
parent 1653 8b82227719f0
child 1712 32ab85031814
equal deleted inserted replaced
1672:2406667c90d6 1680:39860636e184
    14 
    14 
    15 __docformat__ = "restructuredtext en"
    15 __docformat__ = "restructuredtext en"
    16 
    16 
    17 from rql import nodes
    17 from rql import nodes
    18 
    18 
    19 from logilab.mtconverter import TransformError, html_escape
    19 from logilab.mtconverter import TransformError, html_escape, xml_escape
    20 
    20 
    21 from cubicweb import NoSelectableObject
    21 from cubicweb import NoSelectableObject
    22 from cubicweb.selectors import yes, empty_rset
    22 from cubicweb.selectors import yes, empty_rset
    23 from cubicweb.view import EntityView, AnyRsetView, View
    23 from cubicweb.view import EntityView, AnyRsetView, View
    24 from cubicweb.common.uilib import cut, printable_value
    24 from cubicweb.common.uilib import cut, printable_value
   336             return
   336             return
   337         searched = searched.lower()
   337         searched = searched.lower()
   338         highlighted = '<b>%s</b>' % searched
   338         highlighted = '<b>%s</b>' % searched
   339         for attr in entity.e_schema.indexable_attributes():
   339         for attr in entity.e_schema.indexable_attributes():
   340             try:
   340             try:
   341                 value = html_escape(entity.printable_value(attr, format='text/plain').lower())
   341                 value = xml_escape(entity.printable_value(attr, format='text/plain').lower())
   342             except TransformError, ex:
   342             except TransformError, ex:
   343                 continue
   343                 continue
   344             except:
   344             except:
   345                 continue
   345                 continue
   346             if searched in value:
   346             if searched in value: