Preserving user input, storing them in the session. How to escape values to be inserted in HTML.

main.py

[crayon lang="python"]
import webapp2
import cgi
from gaesessions import get_current_session

html = “”"
< !doctype html>

Account Details

%s

“”"

class MainHandler(webapp2.RequestHandler):
def get(self):
session = get_current_session()
firstName = cgi.escape(session.get(‘firstName’, ”), quote = True)
familyName = cgi.escape(session.get(‘familyName’, ”), quote = True)
message = cgi.escape(session.get(‘message’, ”), quote = True)
self.response.out.write(html % (message, firstName, familyName))

def post(self):
firstName = self.request.get(“firstName”)
familyName = self.request.get(“familyName”)
session = get_current_session()
session['firstName'] = firstName
session['familyName'] = familyName
session['message'] = ”
if len(firstName) < 2 or len(familyName) < 2:
session['message'] = “First Name and Family Name are mandatory”
self.redirect(“/”)
self.response.out.write(“First Name: ” + firstName
+ ” Family Name: ” + familyName)

app = webapp2.WSGIApplication([('/', MainHandler)],
debug=True)
[/crayon]