python - safe for each variable in template =? autoescape off for whole template -


does use of |safe each variable in template application , each text equivalent {% autoestsape off %} whole template?

if not when may exploitable?

use filter tag apply filter whole part of template: https://docs.djangoproject.com/en/1.5/ref/templates/builtins/#filter


Comments

Popular posts from this blog

javascript - Count length of each class -

What design pattern is this code in Javascript? -

hadoop - Restrict secondarynamenode to be installed and run on any other node in the cluster -