From 75f454157737e34567a2325dc1c8fd7ca7b6e9a6 Mon Sep 17 00:00:00 2001 From: Michael Williamson Date: Sat, 14 Dec 2013 15:04:13 +0000 Subject: Escape attribute values --- mammoth/html_generation.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'mammoth/html_generation.py') diff --git a/mammoth/html_generation.py b/mammoth/html_generation.py index 37d191a..52f9f92 100644 --- a/mammoth/html_generation.py +++ b/mammoth/html_generation.py @@ -55,6 +55,6 @@ def _generate_attribute_string(attributes): return "" else: return "".join( - ' {0}="{1}"'.format(key, value) + ' {0}="{1}"'.format(key, _escape_html(value)) for key, value in attributes.iteritems() ) -- cgit v1.2.3