python - safe for each variable in template =? autoescape off for whole template -


does use of |safe each variable in template application , each text equivalent {% autoestsape off %} whole template?

if not when may exploitable?

use filter tag apply filter whole part of template: https://docs.djangoproject.com/en/1.5/ref/templates/builtins/#filter


Comments

Popular posts from this blog

javascript - Unusual behaviour when drawing lots of images onto a large canvas -

how can i manage url using .htaccess in php? -

javascript - Chart.js - setting tooltip z-index -