EasyVVUQ icon indicating copy to clipboard operation
EasyVVUQ copied to clipboard

Published 20 hours ago • verified publisher icon UCL-CCS

Fix code scanning alert - Jinja2 templating with autoescape=False

Open DavidPCoster opened this issue 1 year ago • 2 comments

This has medium priority but I'm not sure it is a real issue. This relates to how the templates are used.

Tracking issue for:

  • [ ] https://github.com/UCL-CCS/EasyVVUQ/security/code-scanning/158

DavidPCoster avatar Dec 01 '23 15:12 DavidPCoster

I've just added the field to the Template function and at least locally it does not result in any testing failures...

djgroen avatar Dec 04 '23 10:12 djgroen

Okay, I forgot to tag the issue in the commit, but I just set autoescape to True instead of False. That should work properly, as I did check the jinja2 source code as well now :).

djgroen avatar Dec 04 '23 10:12 djgroen