From 91e65dd798873a0abe54c6484b2f168bfcf9e144 Mon Sep 17 00:00:00 2001 From: Marcin Lulek Date: Mon, 19 Jun 2017 10:56:31 +0200 Subject: [PATCH] User: use new escaped hybrid properties for usage in code. - Allows introducing the safer method of reading first/last names from users. --- rhodecode/model/db.py | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/rhodecode/model/db.py b/rhodecode/model/db.py index 8643d82c..6b30a194 100644 --- a/rhodecode/model/db.py +++ b/rhodecode/model/db.py @@ -571,6 +571,16 @@ class User(Base, BaseModel): def email(self, val): self._email = val.lower() if val else None + @hybrid_property + def first_name(self): + from rhodecode.lib import helpers as h + return h.escape(self.name) + + @hybrid_property + def last_name(self): + from rhodecode.lib import helpers as h + return h.escape(self.lastname) + @hybrid_property def api_key(self): """