python - safe for each variable in template =? autoescape off for whole template -


does use of |safe each variable in template application , each text equivalent {% autoestsape off %} whole template?

if not when may exploitable?

use filter tag apply filter whole part of template: https://docs.djangoproject.com/en/1.5/ref/templates/builtins/#filter


Comments

Popular posts from this blog

c# - SelectList with Dictionary, add values to the Dictionary after it's assigned to SelectList -

mysqli - Php Mysqli_fetch_assoc Error : "Warning: Illegal string offset 'name' in" -

javascript - Chart.js - setting tooltip z-index -