enable jinja2 autoescape

graingert-coef · fabclmnt · commit 357880318e50 · 2024-07-08T15:06:32.000-07:00
Fixes #1599
diff --git a/src/ydata_profiling/report/presentation/flavours/html/templates.py b/src/ydata_profiling/report/presentation/flavours/html/templates.py
@@ -12,7 +12,10 @@
     "ydata_profiling", "report/presentation/flavours/html/templates"
 )
 jinja2_env = jinja2.Environment(
-    lstrip_blocks=True, trim_blocks=True, loader=package_loader
+    lstrip_blocks=True,
+    trim_blocks=True,
+    loader=package_loader,
+    autoescape=jinja2.select_autoescape(),
 )
 jinja2_env.filters["is_list"] = lambda x: isinstance(x, list)
 jinja2_env.filters["fmt_badge"] = fmt_badge

Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,10 @@`
`12`	`12`	`"ydata_profiling", "report/presentation/flavours/html/templates"`
`13`	`13`	`)`
`14`	`14`	`jinja2_env = jinja2.Environment(`
`15`		`- lstrip_blocks=True, trim_blocks=True, loader=package_loader`
	`15`	`+ lstrip_blocks=True,`
	`16`	`+ trim_blocks=True,`
	`17`	`+ loader=package_loader,`
	`18`	`+ autoescape=jinja2.select_autoescape(),`
`16`	`19`	`)`
`17`	`20`	`jinja2_env.filters["is_list"] = lambda x: isinstance(x, list)`
`18`	`21`	`jinja2_env.filters["fmt_badge"] = fmt_badge`