diff -r b02dd2a5f329 -r 35211afcd563 thirdparty/google_appengine/google/appengine/ext/admin/__init__.py
--- a/thirdparty/google_appengine/google/appengine/ext/admin/__init__.py	Fri Oct 10 06:56:56 2008 +0000
+++ b/thirdparty/google_appengine/google/appengine/ext/admin/__init__.py	Fri Oct 10 13:14:24 2008 +0000
@@ -755,7 +755,7 @@
     else:
       string_value = ''
     return '<input class="%s" name="%s" type="text" size="%d" value="%s"/>' % (cgi.escape(self.name()), cgi.escape(name), self.input_field_size(),
-            cgi.escape(string_value))
+            cgi.escape(string_value, True))
 
   def input_field_size(self):
     return 30