自定义小部件未标记为安全

Question

我正在创建一个自定义小部件以将选择字段显示为一排按钮。

到目前为止，我已经从 Django 源代码中复制了用于呈现单选字段的代码作为我的起点：

@html_safe
@python_2_unicode_compatible
class ButtonInput(SubWidget):

  input_type = 'radio'

  def __init__(self, name, value, attrs, choice, index):
    self.name = name
    self.value = value
    self.attrs = attrs
    self.choice_value = force_text(choice[0])
    self.choice_label = force_text(choice[1])
    self.index = index
    if 'id' in self.attrs:
        self.attrs['id'] += "_%d" % self.index
    self.value = force_text(self.value)

  def __str__(self):
      return self.render()

  def render(self, name=None, value=None, attrs=None):
      if self.id_for_label:
          label_for = format_html(' for="{}"', self.id_for_label)
      else:
          label_for = ''
      attrs = dict(self.attrs, **attrs) if attrs else self.attrs
      return format_html(
          '<label{}>{} {}</label>', label_for, self.tag(attrs), self.choice_label
      )

  def is_checked(self):
      return self.value == self.choice_value

  def tag(self, attrs=None):
      attrs = attrs or self.attrs
      final_attrs = dict(attrs, type=self.input_type, name=self.name, value=self.choice_value)
      if self.is_checked():
          final_attrs['checked'] = 'checked'
      return format_html('<input{} />', flatatt(final_attrs))

  @property
  def id_for_label(self):
      return self.attrs.get('id', '')


class ButtonFieldRenderer(ChoiceFieldRenderer):
    choice_input_class = ButtonInput


class ButtonSelect(RendererMixin, Select):
    renderer = ButtonFieldRenderer
    _empty_value = ''

我的问题是这段代码呈现了正确的 HTML，但它没有被标记为安全 - HTML 代码呈现到页面上。鉴于此代码本质上是直接从 Django 源代码复制而来，这非常令人惊讶。

缺少什么？如何使我的小部件类 html 安全？

Answer 1

在你的渲染方法中更改字符串对我有用

  def render(self, name=None, value=None, attrs=None):
      if self.id_for_label:
          label_for = format_html(u' for="{}"', self.id_for_label)
      else:
          label_for = ''
      attrs = dict(self.attrs, **attrs) if attrs else self.attrs
      return format_html(
          u'<label{}>{} {}</label>', label_for, self.tag(attrs), self.choice_label
      )