format_updates_response: Default to apply_markdown=True

It's the safer default to prevent introducing XSS holes.  And in our current
code, we always provide this parameter.

(imported from commit 73897f5315ba54a5d3fa95dd19efb9d20c081a8a)
This commit is contained in:
Keegan McAllister 2012-10-24 14:32:17 -04:00
parent e8dfb41f70
commit 734411369b
1 changed files with 1 additions and 1 deletions

View File

@ -236,7 +236,7 @@ def update_pointer_backend(request, user_profile):
return json_success() return json_success()
def format_updates_response(messages=[], apply_markdown=False, reason_empty=None, def format_updates_response(messages=[], apply_markdown=True, reason_empty=None,
user_profile=None, new_pointer=None, where='bottom', user_profile=None, new_pointer=None, where='bottom',
mirror=None): mirror=None):
max_message_id = None max_message_id = None