Auto escape should be set to true This product is not supported for your selected
Datadog site . (
).
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter .
TRY THIS RULE ID: python-security/jinja-autoescape
Language: Python
Severity: Notice
Category: Security
CWE : 94
Description By default, jinja2 is not autoescaping. This can lead to XSS attacks. The autoescape parameter should always be True.
Learn More Non-Compliant Code Examples import jinja2
env = jinja2 . Environment (
loader = PackageLoader ( "yourapp" ),
autoescape = False # should be True
)
from jinja2 import Environment , PackageLoader , select_autoescape
env = Environment (
loader = PackageLoader ( "yourapp" ),
autoescape = False # should be True
)
Compliant Code Examples import jinja2
env = Environment (
loader = PackageLoader ( "yourapp" ),
autoescape = True
)
from jinja2 import Environment , PackageLoader , select_autoescape
env = Environment (
loader = PackageLoader ( "yourapp" ),
autoescape = select_autoescape ()
)
from jinja2 import Environment , PackageLoader , select_autoescape
env = Environment (
loader = PackageLoader ( "yourapp" ),
autoescape = True
)
