zostera / django-icons / 28091388480

93%

push

github

Fix SafeString loss, XSS in test renderer, and misleading docs (#635)

- core.py: accumulate parts list then join with mark_safe() to preserve
  SafeString type across concatenation in _render_settings_content()
- tests/app/renderers.py: use format_html() instead of f-string to
  prevent XSS in CustomSvgRenderer.get_content(); add @classmethod to
  CustomImageRenderer.get_image_root()
- renderers/image.py: add @classmethod to docstring example and fix
  misleading render_variant() docstring
- example/settings.py: fix SECRET_KEY copy (bootstrap5 → icons) and
  delete icon title (Edit → Delete)

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

53 of 62 branches covered (85.48%)

Branch coverage included in aggregate %.

5 of 6 new or added lines in 2 files covered. (83.33%)

398 of 421 relevant lines covered (94.54%)

14.18 hits per line