From 4b2b2d07bc6e4e4857af5c142a37a35e00a9bd1e Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Fri, 2 Jul 2010 10:08:07 +0100
Subject: [PATCH] Properly escape title of blogposts when generating Delete
 link with the title in it, so it's possible to delete a post that has a
 single quote in the title.

Per report from JD
---
 hamnadmin/register/templates/blogposts.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hamnadmin/register/templates/blogposts.html b/hamnadmin/register/templates/blogposts.html
index d3f265e..a4a2c2f 100644
--- a/hamnadmin/register/templates/blogposts.html
+++ b/hamnadmin/register/templates/blogposts.html
@@ -30,7 +30,7 @@ Return to <a href="../..">blog list</a>.
  <td>{{post.hidden|yesno:"Hidden,Visible"}}</td>
  <td>
   {%if post.hidden%}<a href="unhide/{{post.id}}/">Unhide</a>{%else%}<a href="hide/{{post.id}}/">Hide</a>{%endif%}<br/>
-  <a href="#" onClick="confirmDelete('{{post.title}}',{{post.id}})">Delete</a>
+  <a href="#" onClick="confirmDelete('{{post.title|escapejs}}',{{post.id}})">Delete</a>
  </td>
 </tr>
 {%endfor%}
-- 
2.39.5