From 7011f7742daba380c8bca646daf095893ffc8499 Mon Sep 17 00:00:00 2001 From: Joe Catera Date: Thu, 22 Jan 2026 19:27:20 -0800 Subject: [PATCH] Added import of select_autoescape and used it to escape XML/HTML. --- helpers/markdown.py | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/helpers/markdown.py b/helpers/markdown.py index 06992c05..f5df36d4 100644 --- a/helpers/markdown.py +++ b/helpers/markdown.py @@ -2,7 +2,7 @@ from pathlib import Path import yaml -from jinja2 import Environment, FileSystemLoader, Template +from jinja2 import Environment, FileSystemLoader, Template, select_autoescape from helpers.patterns import check_sfx_link, image_inline_pattern @@ -31,7 +31,15 @@ def process_links(content): def render_template(template, integration_dir, extra_context=None): - env = Environment(loader=FileSystemLoader(Path(__file__).parent.parent), lstrip_blocks=True) + env = Environment( + loader=FileSystemLoader(Path(__file__).parent.parent), + lstrip_blocks=True, + autoescape=select_autoescape( + enabled_extensions=('html', 'xml'), + default_for_string=True, + default=True + ) + ) context = {}