hardcode 'episodeTitle', 'seriesTitle' as allowed edit keys, fixes 1121

This commit is contained in:
j 2012-11-07 00:41:22 +01:00
parent caaff10884
commit cddb6f6560

View file

@ -245,6 +245,8 @@ class Item(models.Model):
self.data[key] = [ox.sanitize_html(t) for t in data[key]]
elif ktype == '[string]':
self.data[key] = [ox.escape_html(t) for t in data[key]]
elif key in ('episodeTitle', 'seriesTitle'):
self.data[key] = ox.escape_html(data[key])
elif isinstance(data[key], basestring):
self.data[key] = ox.escape_html(data[key])
elif isinstance(data[key], list):