Changes between Version 2 and Version 3 of AutoEscape alternative
- Timestamp:
- Oct 5, 2006, 8:39:10 PM (18 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
AutoEscape alternative
v2 v3 16 16 If a tag has already been "finalized" in the view (ie. it doesn't need the filters added to it), a specific new filter `|finalized` can be added to that variable tag. 17 17 18 If a tag explictly already uses the filter, it will not be added again.18 To avoid unwanted double escaping, if a tag explictly already uses a filter declared in `finalfilter`, it will not be added again. 19 19 20 20 == Not too magic == 21 21 22 There is no magical code hidden underneath to worry about. All that's happening is one or more common filters are being applied automatically to every variable tag defined within the `finalfilter` block.22 There is no magical code hidden underneath deciding on what should be escaped. All that's happening is one or more common filters are being applied automatically to every variable tag defined within the `finalfilter` block. 23 23 24 24 == Not too implicit == 25 25 26 The template author has to use itexplicitly. It ''does'' work across `{% extend %}`ed pages however, but some amount of implicitness is required for this to be a useful tag.26 The template author has to use `finalfilter` explicitly. It ''does'' work across `{% extend %}`ed pages however, but some amount of implicitness is required for this to be a useful tag. 27 27 28 28 == Not just HTML escaping ==