turn on autoescape for flask.templating.render_template_string

[alanhamlett]

Previous pull request was #1176

[ThiefMaster]

Could you shorten the commit msg a bit? It's so long that github truncates it. Usually the first line should be 51 chars or less (with the 2nd line being empty and anything else in the following lines (max 72 chars per line)

[alanhamlett]

@ThiefMaster sure, done. What's the eta on this getting merged, I have other pull requests I would like to submit as well.

[untitaker]

I'm not sure how, but I think the current behavior should be better documented.

[untitaker]

In addition to some docs, could you add a changelog and a note in the Upgrading document?

[alanhamlett]

I've updated the docstring which will show up in this doc, but I should regenerate docs or add more info somewhere?

For changelog, should I add to version 0.10.2 or 1.0?

[untitaker]

1.0

[alanhamlett]

Finished all the changes, everything looks good?

[ThiefMaster]

I would squash all the commits (besides the whitespace fixes) into a single one

for the message i'd use e.g. this:

Enable autoescape for `render_template_string

that way you stay below 51 chars and it's still clear what it changes

[untitaker]

I've pinged mitsuhiko on IRC if there's a good reason for the current behavior. I assume not and will merge this if he doesn't respond.

[alanhamlett]

@ThiefMaster squashed.

[ThiefMaster]

thanks! (and oops, looks like i forgot the trailing backtick in the commit message suggestion)

[untitaker]

Thanks, rebased and merged!