enable jinja2 autoescape

Fixes ydataai#1599
graingert-coef · Jul 8, 2024 · 3578803 · 3578803
1 parent be3ec22
commit 3578803
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/ydata_profiling/report/presentation/flavours/html/templates.py b/src/ydata_profiling/report/presentation/flavours/html/templates.py
@@ -12,7 +12,10 @@
  "ydata_profiling", "report/presentation/flavours/html/templates"
 )
 jinja2_env = jinja2.Environment(
- lstrip_blocks=True, trim_blocks=True, loader=package_loader
+ lstrip_blocks=True,
+ trim_blocks=True,
+ loader=package_loader,
+ autoescape=jinja2.select_autoescape(),
 )
 jinja2_env.filters["is_list"] = lambda x: isinstance(x, list)
 jinja2_env.filters["fmt_badge"] = fmt_badge