API - set autoescape on jinja templates

This commit is contained in:
Sam 2022-02-13 15:13:16 +01:00
parent 18e4ba61fc
commit 27d47091b9

View File

@ -6,7 +6,7 @@ from email.mime.text import MIMEText
from typing import Dict, Optional, Type, Union from typing import Dict, Optional, Type, Union
from flask import Flask from flask import Flask
from jinja2 import Environment, FileSystemLoader from jinja2 import Environment, FileSystemLoader, select_autoescape
from .utils_email import parse_email_url from .utils_email import parse_email_url
@ -38,7 +38,10 @@ class EmailMessage:
class EmailTemplate: class EmailTemplate:
def __init__(self, template_directory: str) -> None: def __init__(self, template_directory: str) -> None:
self._env = Environment(loader=FileSystemLoader(template_directory)) self._env = Environment(
autoescape=select_autoescape(['html', 'htm', 'xml']),
loader=FileSystemLoader(template_directory),
)
def get_content( def get_content(
self, template_name: str, lang: str, part: str, data: Dict self, template_name: str, lang: str, part: str, data: Dict