Skip to content

Adding auto-escape to jinja2's Environment

Anton Hvornum requested to merge (removed):fix-jinja2-xss into master

This should disable any potential use case where XSS could be a problem: https://jinja.palletsprojects.com/en/3.0.x/api/#autoescaping

(apologies for the triple commits)

Merge request reports

Loading