From: 云中君 <me@abersheeran.com>
Date: Fri, 16 Aug 2019 16:12:12 +0000 (+0800)
Subject: Fix html escape
X-Git-Tag: 0.12.9~5^2~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F600%2Fhead;p=thirdparty%2Fstarlette.git

Fix html escape
---

diff --git a/starlette/middleware/errors.py b/starlette/middleware/errors.py
index 9c9005c2..1f2c40b4 100644
--- a/starlette/middleware/errors.py
+++ b/starlette/middleware/errors.py
@@ -1,3 +1,4 @@
+import html
 import asyncio
 import inspect
 import traceback
@@ -221,7 +222,7 @@ class ServerErrorMiddleware:
             exc_html += self.generate_frame_html(frame, center_lineno, is_collapsed)
             is_collapsed = True
 
-        error = f"{traceback_obj.exc_type.__name__}: {traceback_obj}"
+        error = f"{traceback_obj.exc_type.__name__}: {html.escape(traceback_obj)}"
 
         return TEMPLATE.format(styles=STYLES, js=JS, error=error, exc_html=exc_html)