Merge branch 'release/1.0.1' into main

edc_lab/admin/modeladmin_mixins.py

@@ -4,6 +4,7 @@
 from django.contrib import admin
 from django.core.exceptions import ObjectDoesNotExist
 from django.utils.html import format_html
+from django.utils.safestring import mark_safe
 from edc_constants.constants import UUID_PATTERN, YES
 from edc_visit_tracking.utils import get_related_visit_model_cls
 
@@ -46,7 +47,10 @@ def requisition(obj=None):
             return format_html(
                 '<span style="color:red;">{}</span>', obj.requisition_identifier
             )
-        return format_html('<span style="color:red;">not drawn</span>')
+        return format_html(
+            "{html}",
+            html=mark_safe('<span style="color:red;">not drawn</span>'),  # nosec B703, B308
+        )
 
     def formfield_for_foreignkey(self, db_field, request, **kwargs):
         if db_field.name == "panel":

edc_lab/lab/manifest.py

@@ -3,6 +3,7 @@
 from django.core.exceptions import ObjectDoesNotExist
 from django.urls.base import reverse
 from django.utils.html import format_html
+from django.utils.safestring import mark_safe
 
 from ..constants import VERIFIED
 
@@ -71,7 +72,7 @@ def add_box(self, box=None, manifest_item_identifier=None):
                         "Item is already in a manifest. See "
                         '<a href="{}" class="alert-link">'
                         "{}</a>",
-                        href,
+                        mark_safe(href),  # nosec B703, B308
                         manifest_identifier,
                     )
                     messages.error(self.request, message)