python - safe for each variable in template =? autoescape off for whole template -


does use of |safe each variable in template application , each text equivalent {% autoestsape off %} whole template?

if not when may exploitable?

use filter tag apply filter whole part of template: https://docs.djangoproject.com/en/1.5/ref/templates/builtins/#filter


Comments

Popular posts from this blog

html - Cut text on left side inside button while centering -

plugins - CodeIgniter support on netbeans 8.0 -

php - Selecting items from MySQL for a status update feed efficiently while accounting for possible spam -