crucialfelix/django-ajax-selects — comment on commit 6b64d9c953d0b30713f8cdb45494554f22b627d7
File: ajax_select/__init__.py line 33
By sjrd:

Must be `escape()`'ed

```Python
return escape(unicode(obj))
```

btw I still think `escape(self.get_result(obj))` is a more sensible default, but this is my own opinion.