From 5bf3bd957b86690f5c35a6a70cfe976dd53584e1 Mon Sep 17 00:00:00 2001
From: Martin Hawlisch <loshawlos@users.sourceforge.net>
Date: Tue, 12 Dec 2006 12:05:19 +0000
Subject: [PATCH] * src/DataViews/_RelationView.py: Escape XML special chars

svn: r7789
---
 gramps2/src/DataViews/_RelationView.py | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gramps2/src/DataViews/_RelationView.py b/gramps2/src/DataViews/_RelationView.py
index d889d58d9..ba3d62069 100644
--- a/gramps2/src/DataViews/_RelationView.py
+++ b/gramps2/src/DataViews/_RelationView.py
@@ -812,17 +812,17 @@ class RelationshipView(PageView.PersonNavView):
 
         birth = ReportUtils.get_birth_or_fallback(self.dbstate.db, child)
         if birth and birth.get_type != RelLib.EventType.BIRTH:
-            bdate  = "<i>%s</i>" % DateHandler.get_date(birth)
+            bdate  = "<i>%s</i>" % cgi.escape(DateHandler.get_date(birth))
         elif birth:
-            bdate  = DateHandler.get_date(birth)
+            bdate  = cgi.escape(DateHandler.get_date(birth))
         else:
             bdate = ""
 
         death = ReportUtils.get_death_or_fallback(self.dbstate.db, child)
         if death and death.get_type != RelLib.EventType.DEATH:
-            ddate  = "<i>%s</i>" % DateHandler.get_date(death)
+            ddate  = "<i>%s</i>" % cgi.escape(DateHandler.get_date(death))
         elif death:
-            ddate  = DateHandler.get_date(death)
+            ddate  = cgi.escape(DateHandler.get_date(death))
         else:
             ddate = ""