Merge pull request #12 from spreadshirt/escape-formatted-field-values

Escape values in `field_format` templates
spreadshirt · Sep 22, 2023 · f5f0c4d · f5f0c4d
2 parents 477827b + f7c7dec
commit f5f0c4d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/render/render_html.py b/render/render_html.py
@@ -291,7 +291,7 @@ def get_value(self, key, args, kwargs):
         val = kwargs.get(key)
         if isinstance(val, dict):
             return DotMap(val)
-        return val
+        return escape(val)
 
 
 class DotMap(dict):
@@ -301,4 +301,4 @@ def __getattr__(self, attr):
         val = self.get(attr)
         if isinstance(val, dict):
             return DotMap(val)
-        return val
+        return escape(val)