bpo-35603: Add a note on difflib table header interpreted as HTML (GH… · python/cpython@c78dae8 (original) (raw)

Original file line number	Diff line number	Diff line change
@@ -127,6 +127,10 @@ diffs. For comparing directories and files, see also, the :mod:`filecmp` module.
127	127	the next difference highlight at the top of the browser without any leading
128	128	context).
129	129
	130	+ .. note::
	131	+ fromdesc and todesc are interpreted as unescaped HTML and should be
	132	+ properly escaped while receiving input from untrusted sources.
	133	+
130	134	.. versionchanged:: 3.5
131	135	charset keyword-only argument was added. The default charset of
132	136	HTML document changed from ``'ISO-8859-1'`` to ``'utf-8'``.