enable jinja2 autoescape

Fixes ydataai#1599
graingert-coef · Jul 8, 2024 · 3578803 · 3578803
1 parent be3ec22
commit 3578803
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/ydata_profiling/report/presentation/flavours/html/templates.py b/src/ydata_profiling/report/presentation/flavours/html/templates.py
@@ -12,7 +12,10 @@
     "ydata_profiling", "report/presentation/flavours/html/templates"
 )
 jinja2_env = jinja2.Environment(
-    lstrip_blocks=True, trim_blocks=True, loader=package_loader
+    lstrip_blocks=True,
+    trim_blocks=True,
+    loader=package_loader,
+    autoescape=jinja2.select_autoescape(),
 )
 jinja2_env.filters["is_list"] = lambda x: isinstance(x, list)
 jinja2_env.filters["fmt_badge"] = fmt_badge