Anders Kaseorg afa218fa2a semgrep: Detect some unsafe uses of markupsafe.Markup. ...

Use the built-in HTML escaping of Markup("…{var}…").format(), in order
to allow Semgrep to detect mistakes like Markup("…{var}…".format())
and Markup(f"…{var}…").

Signed-off-by: Anders Kaseorg <anders@zulip.com>

2023-03-22 11:23:27 -07:00

4.8 KiB

Raw Blame History

View Raw