Skip to content

[pull] main from django:main - #533

Merged
pull[bot] merged 4 commits into
threatcode:mainfrom
django:main
Aug 14, 2026
Merged

[pull] main from django:main#533
pull[bot] merged 4 commits into
threatcode:mainfrom
django:main

Conversation

@pull

@pull pull Bot commented Aug 14, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

adamchainz and others added 4 commits August 14, 2026 09:55
`Media.__init__()` normalized every string js/css entry into `Script` or
`Stylesheet` objects. `SafeString` is a `str` subclass, so html-safe strings
such as `mark_safe("<script defer src=...></script>")`, a previously-documented
idiom for including complete asset tags, were treated as asset paths,
run through `static()`, and percent-encoded instead of being rendered
verbatim.

Leave objects providing `__html__()` un-normalized so that they take the
verbatim rendering path, restoring the Django 6.0 behavior.

Regression in 8096b52.

co-authored-by: Johannes Maron <johannes@maron.family>
@pull pull Bot locked and limited conversation to collaborators Aug 14, 2026
@pull pull Bot added the ⤵️ pull label Aug 14, 2026
@pull
pull Bot merged commit febefb1 into threatcode:main Aug 14, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants