Bug#660086: zope2.12: standard_error_message rendering as text, not html.

[Donovan Baarda]

Package: zope2.12
Version: 2.12.22-1
Severity: normal

Dear Maintainer,

In a fresh zope2.12 instance, the standard_error_message for any error
is rendered as text full of html tags. Just visiting a non-existing
page like http://localhost:9673/crap results in a page of barely
readable raw html.

The error message is returned with a correct "Content-Type: text/html;
charset=iso-8859-15" header, but it looks like the html in the error
message is escaped.

If you visit http://localhost:9673/standard_error_message it appears
to render correctly, with the expected problems rendering unset
dtml-error_type and dtml-error_value vars. It may be that the normal
error message handling sets <dtml-var error_message> with all the html
escaped, thus bypassing the rest of the standard_error_message
template.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages zope2.12 depends on:
ii  debconf [debconf-2.0]  1.5.41
ii  libc6                  2.13-26
ii  lsb-base               3.2-28.1
ii  python                 2.7.2-10
ii  python-docutils        0.8.1-4
ii  python-initgroups      2.13.0-1+b1
ii  python-mechanize       0.2.5-1
ii  python-pkg-resources   0.6.24-1
ii  python-tz              2011h-1
ii  python2.6              2.6.7-4
ii  zope-common            0.5.51

zope2.12 recommends no packages.

Versions of packages zope2.12 suggests:
ii  python [python-profiler]  2.7.2-10
ii  python-unit               1.4.1-16

-- no debconf information