chameleon unescapes entities while processing

[Sidnei da Silva]

Now the opposite bug as the previous one, about the double quote.

Chameleon doesn't escape extended, non-ascii characters where it should. Examples, from failing real world tests:

- “GuadaMen” is a member of these teams: My Team
+ “GuadaMen” is a member of these teams: My Team

- You can’t vote in this poll
+ You can’t vote in this poll

[Sidnei da Silva (sidnei)]

Added a failing test on r4015

[Malthe Borch (mborch)]

I wouldn't necessarily consider this a bug; HTML allows UTF-8 encoded characters, safe for "<", ">" and "&".

At any rate, escaping all non-ascii characters will be quite expensive and if desired, should probably be a configurable behavior, e.g. ``CHAMELEON_ESCAPE_ALL``.

[Malthe Borch (mborch)]

In r4025, a fix has been committed which ensures that HTML entities appearing in the source document will be printed as-is in the template output.

The present issue however, calls for escasping all characters that cannot be expressed natively in the output character set (e.g. if 'ascii' is required, all non-ascii characters should be converted to HTML entities).

[Sidnei da Silva (sidnei)]

Actually, this issue started out as failing to escape but it was a mistake: turned out to be that chameleon was unescaping entities while processing the template. Bug #352399 was opened to track the other issue.