google / google/gae-secure-scaffold-python3
Enable Jinja template auto-escape for any template
Open
- Dominant language
- Python
- Stars
- 35
- Forks
- 19
- PR merge metrics
- No merged PRs in 30d
Description
We should enable Jinja's auto-escape behaviour for _any_ file-based template. The default Flask behaviour applies escaping only for a few templates depending on the filename.
https://flask.palletsprojects.com/en/3.0.x/templating/#jinja-setup
Contributor guide
Assessment
This issue has not been assessed yet.