Merged in CLIP-1583-fix-security-issues (pull request #167)

CLIP-1583: Set autoscape to True to mitigate XSS vulnerabilities.

Approved-by: Dylan Rathbone
This commit is contained in:
Nasser Ghazali-Beiklar
2022-06-27 02:58:26 +00:00

View File

@@ -16,6 +16,7 @@ def find_all_scenarios():
def load_template(): def load_template():
jenv = j2.Environment( jenv = j2.Environment(
loader=j2.FileSystemLoader('.'), loader=j2.FileSystemLoader('.'),
autoescape=True,
lstrip_blocks=True, lstrip_blocks=True,
trim_blocks=True) trim_blocks=True)
return jenv.get_template(PIPELINE_TEMPLATE_J2_FILE) return jenv.get_template(PIPELINE_TEMPLATE_J2_FILE)