Loading docs/templates.txt +1 −1 Original line number Diff line number Diff line Loading @@ -346,7 +346,7 @@ To avoid this problem, you have two options: * One, you can make sure to run each untrusted variable through the ``escape`` filter (documented below), which converts potentially harmful HTML characters to unharmful ones. This was default the default solution HTML characters to unharmful ones. This was the default solution in Django for its first few years, but the problem is that it puts the onus on *you*, the developer / template author, to ensure you're escaping everything. It's easy to forget to escape data. Loading Loading
docs/templates.txt +1 −1 Original line number Diff line number Diff line Loading @@ -346,7 +346,7 @@ To avoid this problem, you have two options: * One, you can make sure to run each untrusted variable through the ``escape`` filter (documented below), which converts potentially harmful HTML characters to unharmful ones. This was default the default solution HTML characters to unharmful ones. This was the default solution in Django for its first few years, but the problem is that it puts the onus on *you*, the developer / template author, to ensure you're escaping everything. It's easy to forget to escape data. Loading