use xml_escape tls-sprint
authorGraziella Toutoungis <graziella.toutoungis@logilab.fr>
Tue, 05 May 2009 15:39:03 +0200
branchtls-sprint
changeset 1680 39860636e184
parent 1672 2406667c90d6
child 1681 1586c0ed9a92
use xml_escape
web/views/baseviews.py
--- a/web/views/baseviews.py	Tue May 05 09:59:01 2009 +0200
+++ b/web/views/baseviews.py	Tue May 05 15:39:03 2009 +0200
@@ -16,7 +16,7 @@
 
 from rql import nodes
 
-from logilab.mtconverter import TransformError, html_escape
+from logilab.mtconverter import TransformError, html_escape, xml_escape
 
 from cubicweb import NoSelectableObject
 from cubicweb.selectors import yes, empty_rset
@@ -338,7 +338,7 @@
         highlighted = '<b>%s</b>' % searched
         for attr in entity.e_schema.indexable_attributes():
             try:
-                value = html_escape(entity.printable_value(attr, format='text/plain').lower())
+                value = xml_escape(entity.printable_value(attr, format='text/plain').lower())
             except TransformError, ex:
                 continue
             except: