[views] bugfix html_escape is now xml_escape

views.py

@@ -7,7 +7,7 @@
 __docformat__ = "restructuredtext en"
 _ = unicode
 
-from logilab.mtconverter import html_escape
+from logilab.mtconverter import xml_escape
 
 from cubicweb.selectors import is_instance
 from cubicweb.view import EntityView
@@ -27,8 +27,8 @@
     show_attr_label = False
 
     def render_entity_title(self, entity):
-        title = u'<a href="%s">%s</a>' % (html_escape(entity.actual_url()),
-                                          html_escape(entity.title))
+        title = u'<a href="%s">%s</a>' % (xml_escape(entity.actual_url()),
+                                          xml_escape(entity.title))
         self.w(u'<h1><span class="etype">%s</span> %s</h1>'
                % (entity.dc_type().capitalize(), title))
 
@@ -43,10 +43,10 @@
         entity = self.cw_rset.complete_entity(row, col)
         descr = entity.printable_value('description', format='text/plain')
         descr = descr and descr.splitlines()[0]
-        values = {'title': html_escape(entity.title),
-                  'url': html_escape(entity.absolute_url()),
-                  'description': html_escape(descr),
+        values = {'title': xml_escape(entity.title),
+                  'url': xml_escape(entity.absolute_url()),
+                  'description': xml_escape(descr),
                   }
         self.w(u'<a href="%(url)s" title="%(description)s">%(title)s</a>'
                % values)
         self.w(u'&nbsp;[<a href="%s">%s</a>]'
@@ -49,8 +49,8 @@
                   }
         self.w(u'<a href="%(url)s" title="%(description)s">%(title)s</a>'
                % values)
         self.w(u'&nbsp;[<a href="%s">%s</a>]'
-               % (html_escape(entity.actual_url()),
+               % (xml_escape(entity.actual_url()),
                   self._cw._('follow')))
 
 
@@ -61,9 +61,9 @@
 
     def cell_call(self, row, col):
         entity = self.cw_rset.complete_entity(row, col)
-        values = {'title': html_escape(entity.title),
-                  'url': html_escape(entity.actual_url()),
-                  'description': html_escape(entity.printable_value('description')),
+        values = {'title': xml_escape(entity.title),
+                  'url': xml_escape(entity.actual_url()),
+                  'description': xml_escape(entity.printable_value('description')),
                   }
         self.w(u'<a href="%(url)s" title="%(description)s">%(title)s</a>'
                % values)