While preparing another patch, I (or rather pychecker) 
found a small bug in roundup/cgi/templating.py -- it 
seems to just be an incorrectly named variable.


Index: roundup/cgi/templating.py
=======================================================
============
--- roundup/cgi/templating.py(revision 11)
+++ roundup/cgi/templating.py(working copy)
@@ -2476,7 +2476,7 @@
 
     def html_quote(self, html):
         '''HTML-quote the supplied text.'''
-        return cgi.escape(url)
+        return cgi.escape(html)
 
     def __getattr__(self, name):
         '''Try the tracker's templating_utils.'''