From 9194f3eb78f2d34477cfd5b80ce973d3326abd5a Mon Sep 17 00:00:00 2001
From: Xavier Morel <xmo@openerp.com>
Date: Fri, 27 Sep 2013 14:05:03 +0200
Subject: [PATCH] [FIX] cgi removal

bzr revid: xmo@openerp.com-20130927120503-9ubf7vgrt38xjywc
---
 openerp/tools/qweb.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/openerp/tools/qweb.py b/openerp/tools/qweb.py
index ada6200b032..9868cb7babe 100644
--- a/openerp/tools/qweb.py
+++ b/openerp/tools/qweb.py
@@ -249,7 +249,7 @@ class QWebXml(object):
         if 'url_for' not in v:
             raise KeyError("qweb: no 'url_for' found in context")
         path = str(v['url_for'](self.eval_format(av, v)))
-        return ' %s="%s"' % (an[2:], cgi.escape(path, 1))
+        return ' %s="%s"' % (an[2:], werkzeug.utils.escape(path))
 
     # Tags
     def render_tag_raw(self, e, t_att, g_att, v):