]> granicus.if.org Git - python/commitdiff
Revert "bpo-35603: Escape table header of make_table output that can cause potential...
authorSerhiy Storchaka <storchaka@gmail.com>
Wed, 2 Jan 2019 12:49:25 +0000 (14:49 +0200)
committerGitHub <noreply@github.com>
Wed, 2 Jan 2019 12:49:25 +0000 (14:49 +0200)
This reverts commit 78de01198b047347abc5e458851bb12c48429e24.

Lib/difflib.py
Lib/test/test_difflib.py
Misc/NEWS.d/next/Library/2018-12-28-14-53-22.bpo-35603.rVCZAE.rst [deleted file]

index 4571817b9823b03c2b041ba961f0418b5da9205e..887c3c26cae4588cdfcfb922e3c2af90cb4a64b3 100644 (file)
@@ -2036,10 +2036,6 @@ class HtmlDiff(object):
                 s.append( fmt % (next_id[i],next_href[i],fromlist[i],
                                            next_href[i],tolist[i]))
         if fromdesc or todesc:
-            fromdesc = fromdesc.replace("&", "&amp;").replace(">", "&gt;") \
-                                                     .replace("<", "&lt;")
-            todesc = todesc.replace("&", "&amp;").replace(">", "&gt;") \
-                                                 .replace("<", "&lt;")
             header_row = '<thead><tr>%s%s%s%s</tr></thead>' % (
                 '<th class="diff_next"><br /></th>',
                 '<th colspan="2" class="diff_header">%s</th>' % fromdesc,
index 63ebdb0dc83b17da3d30f025d6e9f5143e878541..745ccbd6659ed5a3df435daa5b3b2857a85fdbf4 100644 (file)
@@ -238,15 +238,6 @@ class TestSFpatches(unittest.TestCase):
         with open(findfile('test_difflib_expect.html')) as fp:
             self.assertEqual(actual, fp.read())
 
-    def test_make_table_escape_table_header(self):
-        html_diff = difflib.HtmlDiff()
-        output = html_diff.make_table(patch914575_from1.splitlines(),
-                                      patch914575_to1.splitlines(),
-                                      fromdesc='<from>',
-                                      todesc='<to>')
-        self.assertIn('&lt;from&gt;', output)
-        self.assertIn('&lt;to&gt;', output)
-
     def test_recursion_limit(self):
         # Check if the problem described in patch #1413711 exists.
         limit = sys.getrecursionlimit()
diff --git a/Misc/NEWS.d/next/Library/2018-12-28-14-53-22.bpo-35603.rVCZAE.rst b/Misc/NEWS.d/next/Library/2018-12-28-14-53-22.bpo-35603.rVCZAE.rst
deleted file mode 100644 (file)
index 03150c3..0000000
+++ /dev/null
@@ -1,2 +0,0 @@
-Escape table header output of :meth:`difflib.HtmlDiff.make_table`.
-Patch by Karthikeyan Singaravelan.