Escape render_items items text (used in ListField, for example).

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@20944 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Form/FormulatorPatch.py

@@ -611,14 +611,14 @@ def SingleItemsWidget_render_items(self, field, key, value, REQUEST):
 
 
       if item_value == value and not selected_found:
-          rendered_item = self.render_selected_item(item_text,
+          rendered_item = self.render_selected_item(escape(item_text),
                                                     item_value,
                                                     key,
                                                     css_class,
                                                     extra_item)
           selected_found = 1
       else:
-          rendered_item = self.render_item(item_text,
+          rendered_item = self.render_item(escape(item_text),
                                             item_value,
                                             key,
                                             css_class,