[issue2830] Copy cgi.escape() to html

[Georg Brandl]

Georg Brandl <georg at python.org> added the comment:

The docs are still not updated for the quote.

I wonder if we shouldn't make the second argument True by default, while we're at it (or ignore it altogether and always escape everything) -- it would make the escape() much safer to use.

Also quoting "'" already introduces incompatibility if someone compares the result literally, so I would not worry about additional incompatibilities so much.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue2830>
_______________________________________