mitsuhiko/markupsafe — pull request #21 by bukzor (2013-12-12 21:05:20+00:00)
Title: plug xss hole in Markup.format()

There is currently an xss hole in Markup.format(). The failing test I added:

```
======================================================================
FAIL: test_formatting (markupsafe.tests.MarkupTestCase)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/nail/home/buck/trees/theirs/markupsafe/markupsafe/tests.py", line 78, in test_formatting
assert actual == expected, "%r should be %r!" % (actual, expected)
AssertionError: Markup(u'') should be '<awesome>'!

----------------------------------------------------------------------
Ran 13 tests in 0.180s
```