From 913b04022b3cd929f4b5fe4ec83f04821a428430 Mon Sep 17 00:00:00 2001
From: LV-426 <lv-426@taproot.org.il>
Date: Thu, 9 Apr 2015 01:55:37 +0300
Subject: resolve #439 with safe filter (|safe), avoid extra code in index.html

---
 src/server/rz_api_common.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'src/server')

diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py
index 83d29b7c..d2692898 100644
--- a/src/server/rz_api_common.py
+++ b/src/server/rz_api_common.py
@@ -58,6 +58,8 @@ def sanitize_input__rzdoc_name(rzdoc_name):
     if None != rzdoc_name and len(rzdoc_name) > current_app.rz_config.rzdoc__name__max_length:
         raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name))
 
+    # FIXME: fail on HTML escape codes, UTF handling, etc
+
     return rzdoc_name
 
 def validate_obj__attr_diff(attr_diff):
-- 
cgit v1.3.1