mirror of
https://github.com/openSUSE/osc.git
synced 2025-02-15 14:57:17 +01:00
When creating a new request via the core.Request.create method, there is no need to escape the data that is assigned to the "description" attribute of a core.Request instance. Internally, core.Request.create ensures that the data, which is POSTed to the api, is correctly escaped (the escaping is implicitly done by ET (see core.Request.to_str)). Manually escaping the description results in a double escaping (the escaped description is escaped by ET again) - this is not the desired behavior. Analogously, there is no need to escape the data that is passed to the message parameter of the core.create_submit_request function because core.create_submit_request takes care of escaping it. Fixes: #869 ("Silly encoding of htmlencodable entities")