Merge pull request #45 from MozillaSecurity/hostname-escape

Use json.dumps instead of a naive format string to generate the report signature

Author: denschub

src/webcompat/models.py

@@ -68,17 +68,13 @@ def load(cls, data: str) -> Report:
     def create_signature(self) -> Signature:
         """Create a default signature"""
         return Signature(
-            f"""
-            {{
-              "symptoms": [
-                {{
-                  "type": "url",
-                  "part": "hostname",
-                  "value": "{self.url.hostname}"
-                }}
-              ]
-            }}
-            """
+            json.dumps(
+                {
+                    "symptoms": [
+                        {"type": "url", "part": "hostname", "value": self.url.hostname}
+                    ]
+                }
+            )
         )