python - safe for each variable in template =? autoescape off for whole template -
does use of |safe
each variable in template application , each text equivalent {% autoestsape off %}
whole template?
if not when may exploitable?
use filter
tag apply filter whole part of template: https://docs.djangoproject.com/en/1.5/ref/templates/builtins/#filter
Comments
Post a Comment